MAL-2024-3138 Malicious code in tools-access-react-redux (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tools-access-express (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3137 Malicious code in tools-access-express (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3136 Malicious code in tools-access-configs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tools-access-configs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview tools-access-lego is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview tools-access-react is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious Package

Overview tools-access-express is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview tools-access-configs is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview tools-access-react-redux is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in tools-access-lego (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fddb963172387b40e3adf0f4314fb8b30ed7c12d5d3cf70e1ceb7388987313bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-896 Malicious code in tools-access-lego (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fddb963172387b40e3adf0f4314fb8b30ed7c12d5d3cf70e1ceb7388987313bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2009-1143

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs aka hgfsmounter...

Johnson Controls Metasys

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Equipment: Metasys Servers, Engines, and Tools Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could give an authenticated...