Malicious code in telemetry-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd215db682d2cc6eb6c9d4f5f704b66503762047ac210160f07559c07e93dea [email protected] impersonates @telemetry-js/telemetry — its package.json repository/homepage/bugs and README badges all reference the legitima...

CVE-2021-26736 ZApp Installer Privilege Escalation Vulnerabilities

Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges...

PT-2023-12109 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector Installer and Uninstaller for Windows versions prior to 3.6 Description: Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows allowed execution of binaries from a low privileg...

CVE-2017-5259

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https:///adm/syscmd.asp...