939 matches found
Malicious code in mock-solc-0.6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 252116288f46e50fdc890ac7683a16796ff2fdd325109640c5d532e01cc615dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ddd-demo2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1ab8af553dfe0dea6ad77bf720bc5c510a823dcc00efc0a19f6d7cec226ff1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in holvipartners (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f64b4ac4a1fbb5c742f5167e97bd54deaf588ccc6c9ff7ec77da3bbab98e6555 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wagtail-supertable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb42d345125f6f8f05ad098a1eb44eb803af7f0d56979b8c1bd28342a3396e49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-swipeable-wrapper-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 443af72ecaec4287934d683372a3ec0e227c8728f74ca79a6953c4e8c2ac4ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in volgactf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e462ceb3d8d9ad9d4e861f8e6799066df991e50420b1b5ddc6831cfbe5d4e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @logistics-frontend/ndd (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware affdd33b3ef985c7a2234ece7c7196fe737cc2a6bf9262d955b9ac46d7b57222 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in yadanga (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 300b3c7f1448eb05b4e26662ae6b75f1901368a5c346c3b74e37785ab3760da5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @epc-infra/region-only-policy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03aeca5ad9dc6bebb0249d07c948fc2913ba7b25fdc41cea4a5c78c8bf672958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in adroit-f0-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d340a87917821f16332cc13efdd1a133abf2f230303f4245672e1e6307a146d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2022-20066 · Keepkey · Keepkey
Name of the Vulnerable Software and Affected Versions: KeepKey firmware versions prior to 7.3.2 Description: The issue is related to flaws in the supervisor interface of the KeepKey firmware, which can be exploited to bypass security restrictions on firmware operations. This can allow malicious...
IBM Financial Transaction Manager 授权问题漏洞
IBM Financial Transaction Manager for High Value Payments for Multi-Platform FTM HVP is a financial transaction manager for multi-platforms from IBM, USA. The product is primarily used to monitor, track and report on financial payments and transactions. An authorization issue vulnerability exists...
CVE-2020-11688
In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session...
PT-2019-10733 · Cujo · Cujo Smart Firewall
Name of the Vulnerable Software and Affected Versions: CUJO Smart Firewall affected versions not specified Description: A vulnerability exists in the verified boot protection, allowing a local attacker to add arbitrary shell commands into the dhcpd.conf file. These commands persist across reboots...
CVE-2018-1214
Dell EMC SupportAssist Enterprise version 1.1 creates a local Windows user account named "OMEAdapterUser" with a default password as part of the installation process. This unnecessary user account also remains even after an upgrade from v1.1 to v1.2. Access to the management console can be achiev...
UBUNTU-CVE-2016-2161
In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to modauthdigest can cause the server to crash, and each instance continues to crash even for subsequently valid requests...
HP LoadRunner 9.0 ActiveX Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP LoadRunne...
persists-overflow.txt
There is a buffer overflow in the AddFolder method of the Persists Software XUpload control, version 2.1.0.1. This object is marked safe for scripting. Version 3.0latest is not vulnerablethrows an error if the parameter is more than 256 characters, I have not tested any other versions. A quick...
[Full-disclosure] Persits Software XUpload.ocx Buffer Overflow
There is a buffer overflow in the AddFolder method of the Persists Software XUpload control, version 2.1.0.1. This object is marked safe for scripting. Version 3.0latest is not vulnerablethrows an error if the parameter is more than 256 characters, I have not tested any other versions. A quick...