Malicious code in @fbpay/test-container-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be165585af795e998045a4ce8119ba5451800d231888d8391d97d62176cf6301 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-container-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c02a038ea66e543f8673238db59f8ad0c61f27a2e4b2a06b122cd2d893e2191 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-718 Malicious code in @web-utilities/session-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc9f9dbf8a6a5a1191ed2b9b793197ab819fb0f151424d64c627190f7061956 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-716 Malicious code in @web-utilities/other (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2a62e80cf7e750f4b0e5fc6cf39267da264afeed537e4fb330303f817d72cb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-714 Malicious code in @web-utilities/env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5995c346a9279fc0424e6a7b84fa48d6aefa1173e86224c28e0512b90ce7e57f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-719 Malicious code in @web-utilities/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1bb516454e5e6b63139721b1b9904420d5f2dc4706324ec90f4bedb9dd46199 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-713 Malicious code in @web-utilities/argus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36d1b5d703d6f1973fa09b82225c204344c7c4ee8ec1145cf4b3d8cd3d4b44a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @jumpstart-ui/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c11a606194fed054a989b6597e0ebad4cfe17bdf3dd36eaa4ee09ec934a6b416 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in widgets-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc0d7136253d49aca8073d2094c4733e7491db9517189c6c7606c6a6ee7c44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

U.S. Water Utilities Prime Cyberattack Target, Experts

Industrial controls governing water-related U.S. critical infrastructure are woefully under-estimated as cyberattack targets. The potential for attack, say policymakers, is too great to ignore with consequences potentially devastating to populations. On Wednesday, the Center on Cyber and Technolo...

Russian Ministry Website Hacked to Display “Glory To Ukraine” Message

By Deeba Ahmed The targeted website which belongs to the Russian Ministry of Construction, Housing, and Utilities, was also asked to… This is a post from HackRead.com Read the original post: Russian Ministry Website Hacked to Display "Glory To Ukraine" Message...

kvm_utils security update

...

CVE-2022-31022

Bleve is a text indexing library for go. Bleve includes HTTP utilities under bleve/http package, that are used by its sample application. These HTTP methods pave way for exploitation of a node’s filesystem where the bleve index resides, if the user has used bleve’s own HTTP bleve/http handlers fo...

CVE-2022-31022 Missing Role Based Access Control for the REST handlers in bleve/http package

Bleve is a text indexing library for go. Bleve includes HTTP utilities under bleve/http package, that are used by its sample application. These HTTP methods pave way for exploitation of a node’s filesystem where the bleve index resides, if the user has used bleve’s own HTTP bleve/http handlers fo...

Malicious code in dragox-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b050acd8ab9644696e1fb0dc416a070df01b8789894c9bc500918f919dde475 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2590 Malicious code in dragox-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b050acd8ab9644696e1fb0dc416a070df01b8789894c9bc500918f919dde475 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

maven-shared-utils: Command injection via Commandline class

A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...

maven-shared-utils: Command injection via Commandline class

A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...

OESA-2022-1684 maven-shared-utils security update

This package can be the functional replacement of plexus-utils in Maven. At the same time, the package has many hightlights, such as: a lot of methods got cleaned up, generics got added and a lot of unused code dropped. Security Fixes: In Apache Maven maven-shared-utils prior to version 3.3.3, th...

Stored XSS vulnerability in Jenkins Static Analysis Utilities Plugin

Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...