Malicious code in @diotoborg/distinctio-quia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b89940d43491fd1817a20a159abf30fd0df0931a0f9581a0107767005de12bc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in as-rest-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00a576994460aeca57d9642938bbd4c214c2fc5138f9513388b070cb882fde29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-38836 · Code Projects · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical issue affects the processing of the file "/index.php?action=editPharmacist". The manipulation of the id argument leads to SQL injection. The attack may be initiated...

Rockwell Automation Pavilion8

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : Pavilion8 Vulnerability : Missing Encryption of Sensitive Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...

PT-2024-38504 · Unknown · Code-Projects Job Portal

Name of the Vulnerable Software and Affected Versions: code-projects Job Portal version 1.0 Description: A critical issue affects the processing of the file rw i nat.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely. Recommendations: For...

ROS-20240806-18

A vulnerability in the 389 Directory Server is related to the ability of an authenticated user to cause a server crash by changing the userPassword using incorrect input. user to cause a server crash by changing userPassword using incorrect input. Exploitation of the vulnerability could allow an...

CVE-2024-7367

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Realtime Quiz System 1.0. This affects an unknown part of the file /ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...

Rockwell Automation Logix Controllers

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : ControlLogix, GuardLogix, and 1756 ControlLogix I/O Modules Vulnerability : Unprotected Alternate Channel 2. RISK EVALUATION Successful exploitation of this...

VulnCheck KEV: CVE-2024-5217

ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely...

Malicious code in evil-hitcon-2024 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbe1b43a902dc36ccbd6d7dc4e8f50682dc9580bc0bd95e4a572151f480e3116 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sytlesheets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4553cb7abc620f13350d7baa9074fcd72865e064398eec770d217b553265485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Johnson Controls Inc. Software House C●CURE 9000 (Update B)

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION : Exploitable remotely/Low attack complexity Vendor : Johnson Controls Inc. Equipment : Software House C●CURE 9000 Vulnerability : Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...

Malicious code in cdnjquery (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4903831513d38d10f2f8a045dc6e56a11425973ad9a7961d4e4fb98fc02ca3cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/quasi-corrupti-voluptates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aff35a0d18fbb946d275f86207376a525265a1e45fc857fd0133fb77666c5ad4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/quos-quas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e48c5b17a105f94a6d334a48917df570bdfb007010da42ff89e1e806b32efc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SDG Technologies PnPSCADA

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : SDG Technologies Equipment : PnPSCADA Vulnerability : Missing Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to attach various...

Yokogawa FAST/TOOLS and CI Server

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION : Exploitable remotely/low attack complexity Vendor : Yokogawa Equipment : FAST/TOOLS and CI Server Vulnerabilities : Cross-site Scripting, Empty Password in Configuration File 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

Malicious code in source-registry-storage-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a58e938437093f6d5a08c8a6adccfdf20c7352f33de3443cb19ae4f665a87928 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Yokogawa CENTUM

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.7 ATTENTION : Exploitable remotely/Low attack complexity Vendor : Yokogawa Equipment : CENTUM Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary...

CAREL Boss-Mini

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : CAREL Equipment : Boss-Mini Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...