Malicious code in mbed-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 507fba4e1775a5f4e7f71be9c9c8e6f86ce9411d60798e9dac4fef8bb4c47685 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iv-build-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0da1f5b6ad11fed94f99710d6347cadc10f60bf1363f774afb7fd27c9226bf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd9e91f4618495cc4c59d76f8f4126c06c74a3966d97546edc9c7a8d5dbf857b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in assessment-zmarta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45653801bc7c04da5271fafa815874ed3e90695328e763a6415f729f6de09968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in custom-url-paging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39e397694336c75c27beb5bb64c17cb7c8cd6d0f48d05514e6c0c46bafe304f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cart-bucketing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 865fc5f382d06b6070c00326e9f0edf77b907fd00956efa8da261df46d1e7a89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zlpypfaaisdmzcc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9c44cbfb71d11359d53e52f5a6e5c124d8844c95b07a08339fb2facbe577e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.editorcoroutines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c470fdca87ee85474329226533d0903b77a0ce162a7534afb2cd0f387e89ec91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helix-contentsource-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6bfb146db6490aea3415da94f36a8e0e45b5870003b32633008db18332b36d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in attention-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72733589cdd33cc282045e7157eeb27cc432bafef63dc2ef7a51ac824be2ef50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-sdk-mono-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 979fb0281764bb321aa89f52ee521761dda7d8a4a2c9224ea1f6b55a77d3a066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in v3-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45439087657c838afe562f7ee8545fd01977fd0ee167e284431a7a0025cfa62a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc38523beb96cdde6acde02f9c3bd3ff0c0b5f5fbee032f8d4c2ea9e0aae6bdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datadog-app-example-stream-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e9f3353290a0e3d5d5f6bed57d55942007d8c0954f913321c83cb3376333498 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AutomationDirect DirectLOGIC with Ethernet

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: AutomationDirect Equipment: DirectLOGIC with Ethernet Communication Modules Vulnerabilities: Uncontrolled Resource Consumption, Cleartext Transmission of Sensitive Information 2. UPDATE OR REPOSTED...

Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update C)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Equipment : MELSEC iQ-R, Q, and L Series CPU Module; MELIPC Series CPU Vulnerability : Improper Resource Locking 2. RISK EVALUATION Successful exploitation of this vulnerability...

Siemens Teamcenter

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Teamcenter Vulnerability: Use of Hard-coded Credentials 2. UPDATE This updated advisory is a follow-up to the original advisory titled ICSA-22-167-13 Siemens Teamcenter that was...

Mitsubishi Electric MELSEC-Q/L and MELSEC iQ-R

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: MELSEC-Q/L Series and iQ-R Series Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could result in a denial-of-service condition and/or...

CVE-2019-25069 Axios Italia Axios RE Error Message ASP.NET information disclosure

A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure ASP.NET. The attack may be initiated remotely...

Malicious code in yoti_2020 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec41fbfb14efe2e116f592623716f4c4a245d5a7c0a1b58913cef95948e649ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...