Malicious code in separatecalculatingbinary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dae616b64b6c69a16643cdc9b0a5e62009046cc70104baa83a59d895f778e82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-20125

A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2. Affected by this vulnerability is an unknown functionality of the file /roomtype-details.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has...

Google Android Buffer Overflow Vulnerability (CNVD-2022-53367)

Google Android is a Linux-based open source operating system from Google, Inc. A buffer overflow vulnerability exists in Google Android, which stems from the fact that the UE and EMM use NAS messages to communicate with each other. The vulnerability can be exploited to remotely crash the modem...

Motorola Solutions MOSCAD IP and ACE IP Gateways

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely Vendor: Motorola Solutions Equipment: MOSCAD IP Gateway and ACE IP Gateway Vulnerability: Missing Authentication for Critical Function CISA is aware of a public report, known as “OT:ICEFALL” that details vulnerabilities found in...

CVE-2022-2103 Secheron SEPCOS Control and Protection Relay

An attacker with weak credentials could access the TCP port via an open FTP port, allowing an attacker to read sensitive files and write to remotely executable directories...

CVE-2022-2103

The CVE-2022-2103 vulnerability affects Secheron SEPCOS Control and Protection Relay. Affected firmware: SEPCOS Single Package before 1.23.22, before 1.24.8, and before 1.25.3. Attack vector involves an attacker with weak credentials accessing the TCP port via FTP to read sensitive files and writ...

Pyramid Solutions EtherNet/IP Adapter Development Kit

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely, low attack complexity Vendor: Pyramid Solutions, Inc. Equipment: EtherNet/IP Adapter Development Kit Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with...

Secheron SEPCOS Control and Protection Relay

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Secheron Equipment: SEPCOS Control and Protection Relay Vulnerabilities: Improper Enforcement of Behavioral Workflow, Lack of Administrator Control over Security, Improper Privilege Management,...

Phoenix Contact Classic Line Industrial Controllers

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Phoenix Contact Equipment: ILC 131 ETH, ILC 131 ETH/XC, ILC 151 ETH, ILC 151 ETH/XC, ILC 171 ETH 2TX, ILC 191 ETH 2TX, ILC 191 ME/AN, and AXC 1050 Vulnerability: Missing Authentication for Critical...

Phoenix Contact ProConOS and MULTIPROG

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Phoenix Contact Equipment: ProConOS/ProConOS eCLR and MULTIPROG Vulnerability: Insufficient Verification of Data Authenticity CISA is aware of a public report, known as “OT:ICEFALL” that details...

JTEKT TOYOPUC

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely Vendor: JTEKT Equipment: TOYOPUC Products Vulnerability: Missing Authentication for Critical Function CISA is aware of a public report, known as “OT:ICEFALL” that details vulnerabilities found in multiple operational technology OT...

Malicious code in test-rule-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa888ca30e7e2ad22793e2eefd4a5d8529cf876ef40b096470c681371f79f07f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in runkit-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d1a12cf5df9a43c706a5f3c73571ad7199f6a81dd67d4b94d6b91ad149a5f5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-drilldown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cdd12172bde7a63c4950340b53ea0113eede4b46f1482c89eaffd27981cc031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in researchgate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad312a066f5a5127e2aa4119cc0278d217a79e07132aeafda865d683283a8fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tekion/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2609d1363588d82a707a669f60ee6ec53cb9074ff0d5a5d86fc219204d2c5ace Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tekion/gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c20b9450ee05c4bea25f008645c52a2d7a47882f5db644374c52ba977e4e26ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 13-pkg-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d11ff8eabd16040bbd151481a728945ea4c50fe74433a661598e30c0d635d26c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ff-webstore-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27b491152f946c0bad55930959436c8ccaac6a656eed2b9283a284769cfd07b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in weixao (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166d244cc4269f7cabb366e08eca04334a2678450f3d1ef8dd92ad3e6b70a340 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...