MAL-2022-1319 Malicious code in azure-cosmos-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3907287fd18d6a8ecf78ace0bdf4221c1c9d056e75c4d4c94ef1940784c2d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in samples-web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab462c57154f38ea0e59c31fbae08a177f4bfb366e428cba103161237fa8efa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1297 Malicious code in azure-arm-workspaces-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25fdf3e3810b11986993e1ee312d73c2be2e122399ae83f6c577f58853782c50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-dnsresolver-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a616354b1b2aac64d8b3bc18582cb0c0ed41bc7f2db436598b320afcab1b6aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-containerservice-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41531b19eae64de08ead13784ade0f204bab38bd49ccb6962c6a4b94ea0aa472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1268 Malicious code in azure-arm-policyinsights-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4017da4233cfc680669c19e9b2a102228151c27dcb181ff59a7b6ed1ecdd0f7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

0xsodium (>=0.2.0 <=0.14.0), 1password-config (=0.0.1) +11415 more potentially affected by CVE-2022-32210 via undici (>=4.9.3 <=5.4.0)

undici NPM version =4.9.3, =0.2.0, =1.0.0, =0.2.0, =0.4.0, =0.1.0, =0.0.1, =1.0.21, =2.1.0, =2.1.0, =2.1.0, =2.1.1 and more Source cves: CVE-2022-32210 Source advisory: OSV:GHSA-PGW7-WX7W-2W33...

Malicious code in vso-ts-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7d5f57e1649f3d9e39381e987554ad6c5e413545313f4ae014c2c451cd52f75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6983 Malicious code in vso-ts-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7d5f57e1649f3d9e39381e987554ad6c5e413545313f4ae014c2c451cd52f75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ts-jieda.com Cross Site Scripting vulnerability OBB-2639810

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ts-srl.com Cross Site Scripting vulnerability OBB-2639812

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Microsoft Windows TS WebProxy Directory Traversal Vulnerability

Directory traversal vulnerability in the TS WebProxy TSWbPrxy component in Microsoft Windows allows remote attackers to escalate privileges...

QNAP Urges Users to Update NAS Devices to Prevent Deadbolt Ransomware Attacks

Taiwanese network-attached storage NAS devices maker QNAP on Thursday warned its customers of a fresh wave of DeadBolt ransomware attacks. The intrusions are said to have targeted TS-x51 series and TS-x53 series appliances running on QTS 4.3.6 and QTS 4.4.1, according to its product security...

new packages: hunspell-ts

An update is available for hunspell-ts. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Malicious code in speedy-ts-compiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e169a7981c2abffdf7307332d399464dd770067c107f40e8a7c7b6c62fe06e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6234 Malicious code in speedy-ts-compiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e169a7981c2abffdf7307332d399464dd770067c107f40e8a7c7b6c62fe06e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-44052

An improper link resolution before file access 'Link Following' vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, and QTS. If exploited, this vulnerability allows remote attackers to traverse the file system to unintended locations and read or overwrite the...

Vulnerabilities fixed in QNAP QTS, QuTS hero and QuTScloud

QNAP has fixed vulnerabilities in QTS, QuTS hero and QuTScloud. The vulnerabilities potentially enable a malicious party to execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Remote code execution User Rights Access to sensitive data Access to system data...

CVE-2021-38693

A path traversal vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, QTS, QVR Pro Appliance. If exploited, this vulnerability allows attackers to read the contents of unexpected files and expose sensitive data. We have already fixed this vulnerability in the...

QNAP多款产品输入验证错误漏洞

QNAP Systems QNAP QuTScloud is a cloud-optimized version of the QNAP NAS operating system from QNAP Systems. An input validation error vulnerability exists in QNAP QTS, QuTS hero, and QuTScloud, which arises from incorrect cleansing of user-supplied data. A remote attacker could exploit this...