Malicious code in small-sm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c67e4fe96a55da52f6b368337e2060c28fb5f2f5fbe19af21e66d4efe885d03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Honeywell Safety Manager

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Honeywell Equipment: Safety Manager 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow for configuration and firmware manipulation or remote code execution. 3. TECHNICAL...

Inductive Automation Ignition

1. EXECUTIVE SUMMARY CVSS v3 8.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Inductive Automation Equipment: Ignition Vulnerability: Improper Restriction of XML External Entity Reference 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled...

Malicious code in wwww.etherscan.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fb40a5631c7650cc4edd6d7203563c200c7639e3f7e16835240ee97a3b9b677 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in starlink2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b27f7cf7939a9ef1a85defeba72b9554ed572ae1997862f5a54586f71aefa4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-20145

CVE-2017-20145 affects Tecrail Responsive Filemanger up to version 9.10.x. The root cause is a path traversal vulnerability that enables remote access to files. Several connected sources corroborate a critical impact and indicate upgrading to version 9.11.0 as the fix. In at least one reference, ...

Siemens RUGGEDCOM ROX

1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: RUGGEDCOM ROX Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with administrative privileges to gain root...

Malicious code in hvskzgtdmjqaoukx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4179b1d92134e6e24127e069199147c97d9b25e6ee683968289a589b5225f9aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ojbznypdfmaiusgv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65dbe966349297c0324815c1ed0f6dc2a508f96a0dd4e2b86e1eaae7032ec106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fwrvstaguqhzeloy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 626e6abecb93b8cd83fef07bc340994d153dd2e903b79306ebabc9ad9abbdfa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rzltkhpoanubgimk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a066aa10188810392a71ba9286b56e57ecfe2b5e4060a68334d3511bdf63af18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winhfkqtrbudljey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 509ccd07dbb9118c419ed386aa839be709a32ba17c4863708ece10daf4562035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evycfpkhwsoqljrg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0ce36c91e98641c42ec362d8340d5bc7ba980717d9a4dbe4e4d4a0c655cf76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fzsknvyeqakgmuip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03731ee46211f771ec6d0f0bd28ff0f685025cb4f661a544cd772d6516632ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lmpcrfdnkyzehtja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767807fced35833959fb61fef9ce2fa85b57982c0c0340af8029f9068cd41b76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tgfvhxqmrdapikjb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28d4abb8b2f3c34739273ee050bb516233a24669ede5f63bfeee25991240fdf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in specproject-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc69d4c7c339056403bfabdeae74844aaf5dff62ed95d3afee6f0bc03e57fe80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Bently Nevada ADAPT 3701/4X Series and 60M100

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Bently Nevada Equipment: 3701/4X series and 60M100 3701/60 Condition Monitoring System Vulnerabilities: Use of Hard-coded Credentials, Missing Authentication for Critical Function CISA is aware of a...

Malicious code in pipeline-npm-artifactory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bab6877d6c87d826709ecb4658b55ae25609fa03bb1ae1225f771b4d841f196a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CODESYS Gateway Server (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS GmbH Equipment: CODESYS Gateway Server Vulnerability: Heap Based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-15-258-02 3S...