Malicious code in opy-wepback-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0779d4a870d9770efbfaba7658ea8582d5ae3023a91fa9a0ccdbe5483daf414b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opstimlst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1931c57874f4a33e47102b939b2235f5c94f75dbc2032473660d4d102f21e45b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mvue-clss-compoment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6106bcc8b6a7f80b6dba7be361555723866d1a2cdcff1236f3251cb2a0248bb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lowashcamelcase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1d35f94a62c17599b8b2216a404d6802b42763c62aa15c9eb74fe0e1f53e552 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lefko-pd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f78aaf506f6e99d6e64b0e74f83617500cdcd072a44a88caedc29a1a847fbbd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in es-int-pluginr-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63eafc51d590884147e692623639aacbbf9a6827c941c329c8778f74f82592ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypt-osj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 866ab4f1ee9ce8e2e4d4737ae37177fe6a206cc888d00e8d9b3af8e323434910 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pslx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af8c1ff1eb4a1230e5037556f2ccd8852ab4a7c4877b10eba4f503070dabb146 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reacapppolyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28fbf622738bc60241264ca6680209000d75a5a449e6e7db2203994bbc3013a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odecache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad2492c47772e6e4cf129300e624b27336ee956fab51b575916ea1a28fe771d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hpathexists (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e4de173a8ee1c66f7fe971eb726f5b901f7ea832bdf5d0d5381a82504ad9752 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csvtarse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10cb30905c2e8efc3945b7c694a89321be1af6287b238f161e47791803166f93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babelplugintransformruntimy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66baa7b7400141897dd2c9b96227f38a1d69eef3ec1950035b39ac6cf047228e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in baeltraverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5521deb024dc261aa5752ce50bb07c2abb01b57a9150edc884d71557be491041 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wherehouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 716d8e721f3f56bcf3bd9ec501d0d50b26a7230735f3dd134e33db7413e8d714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

LS ELECTRIC PLC and XG5000 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor : LS ELECTRIC, LS Industrial Systems LSIS Co. Ltd Equipment: LS ELEC PLC and XG5000 Vulnerability: Inadequate Encryption Strength 2. UPDATE This updated advisory is a follow-up to the original advisory...

Esri Portal for ArcGIS 跨站脚本漏洞

Esri Portal For ArcGis is a component of Esri, Inc. that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal for ArcGIS, which stems from a stored cross-site scripting XSS vulnerability...

Siemens Simcenter STAR-CCM+

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Simcenter STAR-CCM+ Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Simcenter STAR-CCM+ contains an information disclosure vulnerability...

Emerson OpenBSI

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Emerson Equipment: OpenBSI Vulnerabilities: Use of Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key CISA is aware of a public report, “OT:ICEFALL,” that details...

CVE-2022-2682

A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this issue is some unknown functionality of the file stockin.php. The manipulation of the argument id with the input '"alert/xss/ leads to cross site scripting. T...