Malicious code in wherehouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 716d8e721f3f56bcf3bd9ec501d0d50b26a7230735f3dd134e33db7413e8d714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

LS ELECTRIC PLC and XG5000 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor : LS ELECTRIC, LS Industrial Systems LSIS Co. Ltd Equipment: LS ELEC PLC and XG5000 Vulnerability: Inadequate Encryption Strength 2. UPDATE This updated advisory is a follow-up to the original advisory...

Esri Portal for ArcGIS 跨站脚本漏洞

Esri Portal For ArcGis is a component of Esri, Inc. that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal for ArcGIS, which stems from a stored cross-site scripting XSS vulnerability...

Emerson OpenBSI

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Emerson Equipment: OpenBSI Vulnerabilities: Use of Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key CISA is aware of a public report, “OT:ICEFALL,” that details...

Siemens Simcenter STAR-CCM+

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Simcenter STAR-CCM+ Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Simcenter STAR-CCM+ contains an information disclosure vulnerability...

CVE-2022-2682

A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this issue is some unknown functionality of the file stockin.php. The manipulation of the argument id with the input '"alert/xss/ leads to cross site scripting. T...

Malicious code in small-sm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c67e4fe96a55da52f6b368337e2060c28fb5f2f5fbe19af21e66d4efe885d03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Honeywell Safety Manager

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Honeywell Equipment: Safety Manager 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow for configuration and firmware manipulation or remote code execution. 3. TECHNICAL...

Inductive Automation Ignition

1. EXECUTIVE SUMMARY CVSS v3 8.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Inductive Automation Equipment: Ignition Vulnerability: Improper Restriction of XML External Entity Reference 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled...

Malicious code in wwww.etherscan.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fb40a5631c7650cc4edd6d7203563c200c7639e3f7e16835240ee97a3b9b677 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in starlink2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b27f7cf7939a9ef1a85defeba72b9554ed572ae1997862f5a54586f71aefa4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-20145

CVE-2017-20145 affects Tecrail Responsive Filemanger up to version 9.10.x. The root cause is a path traversal vulnerability that enables remote access to files. Several connected sources corroborate a critical impact and indicate upgrading to version 9.11.0 as the fix. In at least one reference, ...

Siemens RUGGEDCOM ROX

1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: RUGGEDCOM ROX Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with administrative privileges to gain root...

Malicious code in hvskzgtdmjqaoukx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4179b1d92134e6e24127e069199147c97d9b25e6ee683968289a589b5225f9aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ojbznypdfmaiusgv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65dbe966349297c0324815c1ed0f6dc2a508f96a0dd4e2b86e1eaae7032ec106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fwrvstaguqhzeloy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 626e6abecb93b8cd83fef07bc340994d153dd2e903b79306ebabc9ad9abbdfa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rzltkhpoanubgimk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a066aa10188810392a71ba9286b56e57ecfe2b5e4060a68334d3511bdf63af18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winhfkqtrbudljey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 509ccd07dbb9118c419ed386aa839be709a32ba17c4863708ece10daf4562035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evycfpkhwsoqljrg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0ce36c91e98641c42ec362d8340d5bc7ba980717d9a4dbe4e4d4a0c655cf76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fzsknvyeqakgmuip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03731ee46211f771ec6d0f0bd28ff0f685025cb4f661a544cd772d6516632ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...