MAL-2022-2413 Malicious code in default-static-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 444e6bd5db02d9f950ed9524cac2fdea928b3b7da329c4c5aab709f99df61e50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in default-static-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 444e6bd5db02d9f950ed9524cac2fdea928b3b7da329c4c5aab709f99df61e50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in architect-http-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 325828b1ad35dd8da644624797d672297f126000a01c8d1c2e75a3d4d1610e85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1081 Malicious code in architect-http-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 325828b1ad35dd8da644624797d672297f126000a01c8d1c2e75a3d4d1610e85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mindtap-static-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4550bf7958beabc604b2e39198b933186e9f3694692faf653a68c474e740a7b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4597 Malicious code in mindtap-static-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4550bf7958beabc604b2e39198b933186e9f3694692faf653a68c474e740a7b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3568 Malicious code in haven-design-system-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e6e21f6d3eedab2006dc0ba57aa92a86359bd49c3efaf11ec455beeeeef024a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bem-xjst-static-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5c3910628bae004c82b2e78a7ee1be3d4fd038c3335d0f7ac0d3285ee25f45a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1579 Malicious code in binary-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f22f5faa4e1e154cf4758536a5eed283ad0e4bfb1c253423eeda1f642e2139ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sample-static-html-composites (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7976ec211f155da2f9a4d674dd894fd81126d3215e41c4edfc21f9bee7174e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-40903

A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static...

CVE-2021-40903

A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static...

CVE-2021-40903

A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static...

Design/Logic Flaw

A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static...

CVE-2021-40903

CVE-2021-40903 affects Antminer Monitor 0.50.0 via a backdoor or misconfiguration in the Flask server settings file, where a secret string is predefined and static. This could enable improper access or governance issues due to static credentials embedded in the configuration. remediation availabl...

CVE-2021-40903

A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static...

LambdaGuard - AWS Serverless Security

AWS Lambda is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code. LambdaGuard is an AWS Lambda auditing tool designed to create asset...

PT-2022-11331 · Unknown · Antminer Monitor

Name of the Vulnerable Software and Affected Versions: Antminer Monitor version 0.50.0 Description: A vulnerability exists in the Antminer Monitor due to a backdoor or misconfiguration inside a settings file in the flask server. The settings file contains a predefined secret string that is static...

WordPress Static Page eXtended plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Static Page eXtended plugin version 2.1 and previous versions have a cross-site scripting...

CVE-2022-1763

Due to missing checks the Static Page eXtended WordPress plugin through 2.1 is vulnerable to CSRF attacks which allows changing the plugin settings, including required user levels for specific features. This could also lead to Stored Cross-Site Scripting due to the lack of escaping in some of the...