128 matches found
MAL-2022-262 Malicious code in @fb-pfpcommon/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd8a0261fbb5b751bdde66ad91553a2d6586c281d272ae8309cca16eabae8dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-406 Malicious code in @maalik/logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4c90984124534f66b230ac2eb92a0364a88b33f5c02db2cba4e3a47086f9f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6610 Malicious code in toosting (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e25283d8528a1beafc7230c24579e63f590b0e68bf6c7daa9522e03861563a4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6565 Malicious code in thumb-assembler (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a778dc093a4b19a51f799a5bf03fb7714d70147b42627bafbef5bb2c87e33a82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-9 Malicious code in 0-dns (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9345f1024aa16e4fbd012768ffc1ab4a6aa5863e13d3abb1043dbc7e503fa35f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1580 Malicious code in bindingx-weex-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ad15e3937f59b8740d5b69e0bf7b6647f01d5302aef2e1089d0d64ad88a69a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5966 Malicious code in scilla-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae6d1f0d1971141f69900a006415517ea9fa86921fdb5ecb8c24c6b219b5964d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4511 Malicious code in mb-blog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 658aa7eb483cfd352b2c2c628d938ac8566bbf7cbb32d0e806867d1abcc8ae24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress Rotating Posts plugin <= 1.11 - Arbitrary Settings Update to Stored XSS via CSRF vulnerability
Arbitrary Settings Update to Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Rotating Posts plugin versions = 1.11. Solution Deactivate and delete. This plugin has been closed as of May 24, 2022 and is not available for download. This closure is temporary, pending a full...
MAL-2022-5260 Malicious code in pco_api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9c8289fc4eb78d3e66ed76818f5f799edc0dbee5bebe64774a03a2c3148158b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-GVM7-8FQ3-QJJ2 Malicious Package in bs85
All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...
Malicious Package in hsf-clients
All versions of hsf-clients contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...
GHSA-WP2P-Q35G-3RJJ Malicious Package in soket.io
All versions of soket.io are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation This...
Malicious Package
Overview All versions of cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that comput...
Redaman Spams Russian Banking Customers with Rotating Tactics
The Redaman banking trojan ramped up its activity in the last part of 2018, employing ongoing back-end changes in order to evade detection, according to a new Wednesday report. Redaman as a malware first came on the scene in 2015, and since then has consistently targeted victims that use Russian...
Cross-site scripting vulnerability in wordpress plugin rotating-testimonial
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin rotating-testimonial suffers from a cross-site scripting vulnerability due to improper filtering of user...
S8000 rotating machinery online condition monitoring and analysis system /default. asp parameter username injection vulnerability
No description provided by source...
SG8000 large rotating machine monitoring system Alarm SMS module /sg8k_sms information disclosure
No description provided by source...