Malicious code in crypt-osj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 866ab4f1ee9ce8e2e4d4737ae37177fe6a206cc888d00e8d9b3af8e323434910 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pslx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af8c1ff1eb4a1230e5037556f2ccd8852ab4a7c4877b10eba4f503070dabb146 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reacapppolyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28fbf622738bc60241264ca6680209000d75a5a449e6e7db2203994bbc3013a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odecache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad2492c47772e6e4cf129300e624b27336ee956fab51b575916ea1a28fe771d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hpathexists (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e4de173a8ee1c66f7fe971eb726f5b901f7ea832bdf5d0d5381a82504ad9752 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csvtarse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10cb30905c2e8efc3945b7c694a89321be1af6287b238f161e47791803166f93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babelplugintransformruntimy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66baa7b7400141897dd2c9b96227f38a1d69eef3ec1950035b39ac6cf047228e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in baeltraverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5521deb024dc261aa5752ce50bb07c2abb01b57a9150edc884d71557be491041 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wherehouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 716d8e721f3f56bcf3bd9ec501d0d50b26a7230735f3dd134e33db7413e8d714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

LS ELECTRIC PLC and XG5000 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor : LS ELECTRIC, LS Industrial Systems LSIS Co. Ltd Equipment: LS ELEC PLC and XG5000 Vulnerability: Inadequate Encryption Strength 2. UPDATE This updated advisory is a follow-up to the original advisory...

Esri Portal for ArcGIS 跨站脚本漏洞

Esri Portal For ArcGis is a component of Esri, Inc. that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal for ArcGIS, which stems from a stored cross-site scripting XSS vulnerability...

Siemens Simcenter STAR-CCM+

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Simcenter STAR-CCM+ Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Simcenter STAR-CCM+ contains an information disclosure vulnerability...

Emerson OpenBSI

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Emerson Equipment: OpenBSI Vulnerabilities: Use of Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key CISA is aware of a public report, “OT:ICEFALL,” that details...

CVE-2022-2682

A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this issue is some unknown functionality of the file stockin.php. The manipulation of the argument id with the input '"alert/xss/ leads to cross site scripting. T...

Malicious code in small-sm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c67e4fe96a55da52f6b368337e2060c28fb5f2f5fbe19af21e66d4efe885d03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Honeywell Safety Manager

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Honeywell Equipment: Safety Manager 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow for configuration and firmware manipulation or remote code execution. 3. TECHNICAL...

Inductive Automation Ignition

1. EXECUTIVE SUMMARY CVSS v3 8.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Inductive Automation Equipment: Ignition Vulnerability: Improper Restriction of XML External Entity Reference 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled...

Malicious code in wwww.etherscan.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fb40a5631c7650cc4edd6d7203563c200c7639e3f7e16835240ee97a3b9b677 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in starlink2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b27f7cf7939a9ef1a85defeba72b9554ed572ae1997862f5a54586f71aefa4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-20145

CVE-2017-20145 affects Tecrail Responsive Filemanger up to version 9.10.x. The root cause is a path traversal vulnerability that enables remote access to files. Several connected sources corroborate a critical impact and indicate upgrading to version 9.11.0 as the fix. In at least one reference, ...