Malicious code in xuworu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1acc43bebaf87047f1a3e650d87d7d46e95536b55031fee016b4d2e91a6aa9ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_the_secret_by_rhonda_byrne_qnyoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cde9a96d6fa88b1118bcac423a8896f2781965955282fb800fa71d98d27a46a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quaerat-tempore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d9f2f7a7100c7862170ccc58e619177fe8b04da795b4739743ecc1b7392a820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/veritatis-eveniet-cumque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e50dde0e5c04e97f4ed5024360bd3950d612037eb0002bcf0575fffcd32d44be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/consectetur-consequuntur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9282f643a0e7520d88d082ff71319849893e610b6ac28c0ce0bf1f1bc031ce48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/recusandae-non (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware babd548939ccd4276e2983abadb6053226cb0a7eccf7fc2bef8cc2ba65a73073 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quis-dolor-laborum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f837cc9ee6318dba1db7efd6270781cf49998f71b4162db9e0b5eac4b073bee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/commodi-aut (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 136433c39e76cf9c4da076a7d7a183b6e17360912dc804dece2e76a6b1a6c98f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/distinctio-quia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b89940d43491fd1817a20a159abf30fd0df0931a0f9581a0107767005de12bc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in as-rest-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00a576994460aeca57d9642938bbd4c214c2fc5138f9513388b070cb882fde29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-38836 · Code Projects · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical issue affects the processing of the file "/index.php?action=editPharmacist". The manipulation of the id argument leads to SQL injection. The attack may be initiated...

Rockwell Automation Pavilion8

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : Pavilion8 Vulnerability : Missing Encryption of Sensitive Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...

PT-2024-38504 · Unknown · Code-Projects Job Portal

Name of the Vulnerable Software and Affected Versions: code-projects Job Portal version 1.0 Description: A critical issue affects the processing of the file rw i nat.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely. Recommendations: For...

ROS-20240806-18

A vulnerability in the 389 Directory Server is related to the ability of an authenticated user to cause a server crash by changing the userPassword using incorrect input. user to cause a server crash by changing userPassword using incorrect input. Exploitation of the vulnerability could allow an...

CVE-2024-7367

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Realtime Quiz System 1.0. This affects an unknown part of the file /ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...

Rockwell Automation Logix Controllers

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : ControlLogix, GuardLogix, and 1756 ControlLogix I/O Modules Vulnerability : Unprotected Alternate Channel 2. RISK EVALUATION Successful exploitation of this...

VulnCheck KEV: CVE-2024-5217

ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely...

Malicious code in evil-hitcon-2024 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbe1b43a902dc36ccbd6d7dc4e8f50682dc9580bc0bd95e4a572151f480e3116 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sytlesheets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4553cb7abc620f13350d7baa9074fcd72865e064398eec770d217b553265485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Johnson Controls Inc. Software House C●CURE 9000 (Update B)

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION : Exploitable remotely/Low attack complexity Vendor : Johnson Controls Inc. Equipment : Software House C●CURE 9000 Vulnerability : Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...