Malicious code in zlpypfaaisdmzcc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9c44cbfb71d11359d53e52f5a6e5c124d8844c95b07a08339fb2facbe577e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.editorcoroutines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c470fdca87ee85474329226533d0903b77a0ce162a7534afb2cd0f387e89ec91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helix-contentsource-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6bfb146db6490aea3415da94f36a8e0e45b5870003b32633008db18332b36d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in attention-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72733589cdd33cc282045e7157eeb27cc432bafef63dc2ef7a51ac824be2ef50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in v3-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45439087657c838afe562f7ee8545fd01977fd0ee167e284431a7a0025cfa62a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-sdk-mono-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 979fb0281764bb321aa89f52ee521761dda7d8a4a2c9224ea1f6b55a77d3a066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc38523beb96cdde6acde02f9c3bd3ff0c0b5f5fbee032f8d4c2ea9e0aae6bdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datadog-app-example-stream-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e9f3353290a0e3d5d5f6bed57d55942007d8c0954f913321c83cb3376333498 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AutomationDirect DirectLOGIC with Ethernet

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: AutomationDirect Equipment: DirectLOGIC with Ethernet Communication Modules Vulnerabilities: Uncontrolled Resource Consumption, Cleartext Transmission of Sensitive Information 2. UPDATE OR REPOSTED...

Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update C)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Equipment : MELSEC iQ-R, Q, and L Series CPU Module; MELIPC Series CPU Vulnerability : Improper Resource Locking 2. RISK EVALUATION Successful exploitation of this vulnerability...

Mitsubishi Electric MELSEC-Q/L and MELSEC iQ-R

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: MELSEC-Q/L Series and iQ-R Series Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could result in a denial-of-service condition and/or...

Siemens Teamcenter

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Teamcenter Vulnerability: Use of Hard-coded Credentials 2. UPDATE This updated advisory is a follow-up to the original advisory titled ICSA-22-167-13 Siemens Teamcenter that was...

CVE-2019-25069 Axios Italia Axios RE Error Message ASP.NET information disclosure

A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure ASP.NET. The attack may be initiated remotely...

Malicious code in yoti_2020 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec41fbfb14efe2e116f592623716f4c4a245d5a7c0a1b58913cef95948e649ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-excess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 203e8614dafc1923f99d9a6344719fe855ea8060bbaa87f636fe07d0c6c06319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Matrikon OPC Server

1. EXECUTIVE SUMMARY CVSS v3 5.8 ATTENTION: Exploitable remotely Vendor: Matrikon, a subsidiary of Honeywell Equipment: Matrikon OPC Server Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote command...

Rockwell Automation Logix Controllers

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: Logix Controllers Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an unauthorized user to send malicious messages to...

Mitsubishi Electric MELSEC iQ-F Series

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELSEC iQ-F Series Vulnerabilities: Improper Input Validation 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-22-139-01...

Malicious code in bolt-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40639c5f8b34134db966654cf56e02dd69cd250d3a0d8873dba524ac9c75ae7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

October CMS Local File Inclusion

October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php makeFileContents function that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend path i...