Siemens RUGGEDCOM ROX

1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: RUGGEDCOM ROX Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with administrative privileges to gain root...

Malicious code in hvskzgtdmjqaoukx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4179b1d92134e6e24127e069199147c97d9b25e6ee683968289a589b5225f9aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ojbznypdfmaiusgv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65dbe966349297c0324815c1ed0f6dc2a508f96a0dd4e2b86e1eaae7032ec106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fwrvstaguqhzeloy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 626e6abecb93b8cd83fef07bc340994d153dd2e903b79306ebabc9ad9abbdfa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rzltkhpoanubgimk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a066aa10188810392a71ba9286b56e57ecfe2b5e4060a68334d3511bdf63af18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winhfkqtrbudljey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 509ccd07dbb9118c419ed386aa839be709a32ba17c4863708ece10daf4562035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evycfpkhwsoqljrg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0ce36c91e98641c42ec362d8340d5bc7ba980717d9a4dbe4e4d4a0c655cf76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fzsknvyeqakgmuip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03731ee46211f771ec6d0f0bd28ff0f685025cb4f661a544cd772d6516632ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lmpcrfdnkyzehtja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767807fced35833959fb61fef9ce2fa85b57982c0c0340af8029f9068cd41b76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tgfvhxqmrdapikjb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28d4abb8b2f3c34739273ee050bb516233a24669ede5f63bfeee25991240fdf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in specproject-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc69d4c7c339056403bfabdeae74844aaf5dff62ed95d3afee6f0bc03e57fe80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Bently Nevada ADAPT 3701/4X Series and 60M100

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Bently Nevada Equipment: 3701/4X series and 60M100 3701/60 Condition Monitoring System Vulnerabilities: Use of Hard-coded Credentials, Missing Authentication for Critical Function CISA is aware of a...

Malicious code in pipeline-npm-artifactory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bab6877d6c87d826709ecb4658b55ae25609fa03bb1ae1225f771b4d841f196a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CODESYS Gateway Server (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS GmbH Equipment: CODESYS Gateway Server Vulnerability: Heap Based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-15-258-02 3S...

Malicious code in separatecalculatingbinary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dae616b64b6c69a16643cdc9b0a5e62009046cc70104baa83a59d895f778e82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-20125

A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2. Affected by this vulnerability is an unknown functionality of the file /roomtype-details.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has...

Google Android Buffer Overflow Vulnerability (CNVD-2022-53367)

Google Android is a Linux-based open source operating system from Google, Inc. A buffer overflow vulnerability exists in Google Android, which stems from the fact that the UE and EMM use NAS messages to communicate with each other. The vulnerability can be exploited to remotely crash the modem...

Motorola Solutions MOSCAD IP and ACE IP Gateways

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely Vendor: Motorola Solutions Equipment: MOSCAD IP Gateway and ACE IP Gateway Vulnerability: Missing Authentication for Critical Function CISA is aware of a public report, known as “OT:ICEFALL” that details vulnerabilities found in...

CVE-2022-2103

The CVE-2022-2103 vulnerability affects Secheron SEPCOS Control and Protection Relay. Affected firmware: SEPCOS Single Package before 1.23.22, before 1.24.8, and before 1.25.3. Attack vector involves an attacker with weak credentials accessing the TCP port via FTP to read sensitive files and writ...

CVE-2022-2103 Secheron SEPCOS Control and Protection Relay

An attacker with weak credentials could access the TCP port via an open FTP port, allowing an attacker to read sensitive files and write to remotely executable directories...