Malicious code in etherscancontractinteraction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9aa1dfa3873a9053735f5f55e19e500a9479df8c99b3b204aa81320b6aa2e34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in action-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47502de1954b1ba4d201ac64813edf79362d7f81fb2c28f6802f800d93bc08d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11240

A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unknown processing of the file /database.php of the component Banco de Dados Tab. The manipulation of the argument dbloginrole leads to cross site scripting. The attack may be...

Malicious code in ax-ntlm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4f424aab2dcc6cf1cd2739c30f2b94d2137b9bc89a91aa17b8071ec23370a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-9841

OpenText ArcSight Management Center and ArcSight Platform are affected by a Reflected Cross-Site Scripting (XSS) vulnerability. The issue could be remotely exploited and is documented with XSS in multiple sources. The vulnerability affects ArcSight Management Center/ArcSight Platform; root cause ...

CVE-2024-9841 OpenText ArcSight Management Center and ArcSight Platform Stored XSS

A Reflected Cross-Site Scripting XSS vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited...

Malicious code in client-req-scopes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b46412fce5fe330212b43b8bb638bc55056c4d72aee91074e21429f921e46232 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-providers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e01b5c7e434c166fc697d6c13f5aee669e57506125bea0d9639ef863220d2076 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteer-harr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware effb0fdb355ff7883bbc36ecd97a4dc5c58f9f6db5c0a97abad523aae554b279 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pupetier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17ed1e8a0a9a3d6f3fb16f3ca3a66b00b5f3f91c2fbf9bfa4688339f40e1d80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in visma-connect-bv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 005faae12170fc7458fde90c1e389106818e875219f93719065488d5f10ff95a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csm-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64d16c1d6eb0822be5e65caced92f56b1f6160e2fafc6343c11694ce4eca80c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10157

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/password-recovery.php of the component Reset Your Password Page. The manipulation of the argument username/mobileno leads to sql injection...

Mitsubishi Electric CNC Series (Update D)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable remotely Vendor : Mitsubishi Electric Equipment : CNC Series Vulnerability : Improper Validation of Specified Quantity in Input 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated remote...

Malicious code in 52qr42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e559619ab6112e5213407ad80e432cfb2f9143718e79a18bf5c4f94d26ecf0d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in y7s8cl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72379719b4462ccdede2c2e51482fbe44f00b5316c34d06906c0c0b036953214 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-lo-ad-now-zip-mp3-7514-tapestry-fqgk2-jvvwtn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e313ea5904ea6421f91d9c6bd2eec5d8a7571283640ee280aa882e8eb90fa44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-9792

A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely...

Malicious code in braintree_express_example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d099bf20fe3b1d17efadfd0e185e8a178edf635e5754d26c3710e5b99c2a1404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Siemens SINEC Security Monitor

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...