MAL-2022-2067 Malicious code in com.unity.modules.ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c61b357d250a8f5ddfdf95f36cd35001001ac1f60a45d3d0883bc50112ed2c56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-441 Malicious code in @msmg/vue-merge-data-qa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 148b5fef898978c5cca2c43755dc356409fd64fed11c1c4104fc0ba40a586ac5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5286 Malicious code in perf-keyvault-certificates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9003463e95619d4e40f5507d682e1e9f6c51dfe0d607c8397e22babb820bd8d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2056 Malicious code in com.unity.burst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa1200292d4c5c8b4251c82a2399f15492df62ae7f6d078d2fbf6da1eb2affbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1921 Malicious code in cli-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf3ebaab018a1f346bd035ff329fe505d90fd4783fe0b59983049e513bc40a2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6885 Malicious code in v3-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45439087657c838afe562f7ee8545fd01977fd0ee167e284431a7a0025cfa62a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5469 Malicious code in procore-sample-ror (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dc6f4838b759013378cffc35f10b117fb48dbf721fb708018ed02ac6ca1eeff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Researchers Find Backdoor in School Management Plugin for WordPress

Multiple versions of a WordPress plugin by the name of "School Management Pro" harbored a backdoor that could grant an adversary complete control over vulnerable websites. The issue, spotted in premium versions before 9.9.7, has been assigned the CVE identifier CVE-2022-1609 and is rated 10 out o...

CVE-2021-26386

A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution...

A Brief Walkthrough On CMMS Cybersecurity

By Owais Sultan CMMS platforms can also be compromised like peer software which brings us to our today’s discussion topic of how to prevent cyber attacks. This is a post from HackRead.com Read the original post: A Brief Walkthrough On CMMS Cybersecurity...

Authorization Bypass

mysql-connector-java is vulnerable to authorization bypass. A difficult-to-exploit vulnerability allows a high-privileged attacker to bypass authorization, compromise the MySQL connectors and obtain full control over the connectors...

Advantech WebAccess 'updateTemplate.aspx' SQL Injection and Authentication Bypass Vulnerabilities

Advantech WebAccess is prone to an SQL injection SQLi vulnerability and an authentication-bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Zortam Media Studio 20.60 - Buffer Overflow Vulnerability

Product & Service Introduction: =============================== Zortam Mp3 Media Studio is a great all-in-one music tool for organizing your Mp3/Karaoke collection for editing Mp3 ID3 tags, ripping your CD, normalizing Mp3, converts Mp3/Wav and Wav/Mp3, to get song lyric and cover arts from the...

Xoops 1.3.x/2.0.x Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/9166/info Multiple vulnerabilities were reported in Xoops. These issues include SQL injection and input validation issues that will allow remote attackers to manipulate banners and local variables. Exploitation could...

PAFileDB 1.1.3/2.1.1/3.0/3.1 viewall.php start Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/12788/info Multiple SQL injection and cross-site scripting vulnerabilities exist in paFileDB. These issues are reported to exist in the 'viewall.php' and 'category.php' scripts. Exploitation of these issues may allow for...

ProductCart 1.x/2.x Custva.asp redirectUrl Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/9669/info EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities. The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses. These issues could expose sensitive data suc...

ProductCart 1.x/2.x advSearch_h.asp Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/9669/info EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities. The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses. These issues could expose sensitive data suc...

Internet Systems Consortium Resolves Critical BIND Flaw

The Internet Systems Consortium ISC published a security advisory yesterday resolving a high priority, remotely exploitable denial-of-service vulnerability in BIND 9, the de facto software standard for implementing domain name system protocols online. There is a defect in BIND 9 that could...

Dir2web - '/system/src/dispatcher.php?oid' SQL Injection

source: https://www.securityfocus.com/bid/54845/info Dir2web is prone to multiple security vulnerabilities, including an SQL-Injection vulnerability and an information-disclosure vulnerability. Successfully exploiting these issues allows remote attackers to compromise the software, retrieve...

VOXTRONIC Voxlog Professional 3.7.x - userlogdetail.php?idclient SQL Injection

VOXTRONIC Voxlog Professional 3.7.x - userlogdetail.php?idclient SQL Injection source: https://www.securityfocus.com/bid/52081/info VOXTRONIC Voxlog Professional is prone to a file-disclosure vulnerability and multiple SQL-injection vulnerabilities because it fails to properly sanitize...