1573 matches found
CVE-2022-21589 vulnerabilities
Vulnerabilities for packages: mysql...
Developer account body snatchers pose risks to the software supply chain
Over the past several years, high-profile software supply chain attacks have increased in frequency. These attacks can be difficult to detect and source code repositories became a key focus of this research. Developer account takeovers present a substantial risk to the software supply chain becau...
GHSA-8QV5-68G4-248J vulnerabilities
Vulnerabilities for packages: spark-fips...
CVE-2022-36062 vulnerabilities
Vulnerabilities for packages: grafana-fips...
[SECURITY] Fedora 36 Update: moodle-3.11.10-1.fc36
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...
PYSEC-2022-43099
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...
BELL-CVE-2021-3735
Bulletin has no description...
Exploit for Improper Encoding or Escaping of Output in Webmin
A Python script to exploit CVE-202...
Webmin Package Updates Command Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Webmin Package Updates RCE', 'Description' = %q This module exploits an arbitrary command injection in Webmin versions prior to 1.997. Webmin use...
Webmin Package Updates RCE
This module exploits an arbitrary command injection in Webmin versions prior to 1.997. Webmin uses the OS package manager apt, yum, etc. to perform package updates and installation. Due to a lack of input sanitization, it is possibe to inject arbitrary command that will be concatenated to the...
Malicious code in deere-ui-multiselect (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc9d34c6fcae292047f5c4942fc8c169901958ab5f25ab865d02e733c499e5c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in akjpmzcxeynfikob (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6fe6a23f3e8d2a0ecd4aca03b55833ce9b00ab53653cdd6d568197f15cc23b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in one-world-radio (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ffa01ed49e6d70a5a5984e7a2dc3d37a03842a5bc1fc3228c997c91ab11d433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dco-bot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df58cd3871074ca88952cb9f0b8a69f7b28de8e0eae69a383867d2eb48db891d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-config-hfd (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3ab662789e5678f00a08aa799ce7ca12d5c4aa08c4ed2589397d2237ae147e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2468 Malicious code in dig-fonts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68842e49cf80a3814d14c9cf0b93f4d6faf7d874cf521eb295c4ab3a167bbed0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-654 Malicious code in @tinkoff-react-bui/highlighter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f35ba0953c3d1b55af3ac66481e856e15f84300b58641282f67339e9fa1bbb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5531 Malicious code in purview-catalog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90b0032f8cf0b6d31990e681337cb6df917888cbf11cc64df4990956bdae3b5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-24876
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Kanban is a GLPI view to display Projects, Tickets, Changes or Problems on a task board. In versions prior to 10.0.1 a user can exploit a cross site scriptin...