Malicious code in swisscom-ai-research-keyphrase (PyPI)

Source: kam193 e11009ce6f39424ab9bbe1470888a9f5be4f1252dab4c82a03d684d372eb7cc9 Package exploits dependency confusion. A beacon request is used to report usage back, but no additional information are exfiltrated. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but...

CLSA-2026-1772644488 Update of ca-certificates

update to CKBI 2.82 from NSS 3.121 - updated certificates: - Certificate "GlobalSign Root CA" - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Comodo AAA Services root" - Certificate "XRamp Global CA Root" - Certificate "Go Daddy Class 2 CA" - Certificate "Starfield Class...

CLSA-2026-1772644297 Update of ca-certificates

update to CKBI 2.82 from NSS 3.120 - updated certificates: - Certificate "GlobalSign Root CA" - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Comodo AAA Services root" - Certificate "XRamp Global CA Root" - Certificate "Go Daddy Class 2 CA" - Certificate "Starfield Class...

EUVD-2019-9530

Malware in sbrugna...

EUVD-2019-9529

Malware in sbrugna...

EUVD-2018-18513

Malware in sbrugna...

EUVD-2020-8100

Malware in sbrugna...

EUVD-2015-1330

Malware in sbrugna...

CVE-2020-16134

An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet Box 3 prior to 11.01.20, and Internet Box light prior to 08.06.06. Given the user-configurable credentials for the local Web interface or physical access to a device's plus or...

CVE-2019-19940

Incorrect input sanitation in text-oriented user interfaces telnet, ssh in Swisscom Centro Grande before 6.16.12 allows remote authenticated users to execute arbitrary commands via command injection...

CVE-2019-19941

Missing hostname validation in Swisscom Centro Grande before 6.16.12 allows a remote attacker to inject its local IP address as a domain entry in the DNS service of the router via crafted hostnames in DHCP requests, causing XSS...

Malware in swisscom-scaleio

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-12 Malicious code in swisscom-scaleio (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c56983709f53a43b82244bcb874d8ee94f893ad1f3c90d2bb0c4e875d5bb97b Any computer that has this package install...

Malicious code in swisscom-scaleio (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c56983709f53a43b82244bcb874d8ee94f893ad1f3c90d2bb0c4e875d5bb97b Any computer that has this package install...

MAL-2024-3071 Malicious code in swisscom-sdx (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in swisscom-sdx (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2022-6378 Malicious code in swisscom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 077089a7a9b30f65182cf15613ff14c223cce05664890e26df87d994ec1291f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in swisscom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 077089a7a9b30f65182cf15613ff14c223cce05664890e26df87d994ec1291f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in swisscom

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2020-16134

An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet Box 3 prior to 11.01.20, and Internet Box light prior to 08.06.06. Given the user-configurable credentials for the local Web interface or physical access to a device's plus or...