GO-2022-0503 Denial of service via malformed CAR data in github.com/ipld/go-car and go-car/v2

Decoding malformed CAR data can cause panics or excessive memory usage...

MAL-2022-5206 Malicious code in pancakeswap-v2-subgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e92926b45b2dbde728955b8808c67bb42af6d599ed815dcbc7d2dfa9b0d538 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview pancakeswap-v2-subgraph is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Retbleed - arbitrary speculative code execution with return instructions

ISSUE DESCRIPTION Researchers at ETH Zurich have discovered Retbleed, allowing for arbitrary speculative execution in a victim context. For more details, see: https://comsec.ethz.ch/retbleed ETH Zurich have allocated CVE-2022-29900 for AMD and CVE-2022-29901 for Intel. Despite the similar...

PT-2022-21325 · Totolink · Totolink Ex300 V2

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX300 V2 version 4.0.3c.7484 Description: A command injection issue was found via the langType parameter in the setLanguageCfg function. This issue can be exploited through a crafted MQTT data packet. Recommendations: For TOTOLINK...

Malformed CAR panics and excessive memory usage

Impact Versions impacted = [email protected] = [email protected] Description of user-facing changes...

CVE-2022-31806

In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller...

CVE-2022-31806

CVE-2022-31806 affects CODESYS V2 PLCWinNT and Runtime Toolkit 32-bit, prior to version V2.4.7.57, due to insecure/default password protection not enabled and no prompt to enable at login when no password exists. Public sources (CISA ICS advisory ICSA-25-329-05) describe potential consequences as...

CVE-2022-31804

The CVE-2022-31804 vulnerability affects the CODESYS Gateway Server V2 (prior to version 2.3.9.38). It does not verify that the size of a request is within expected limits, allowing an unauthenticated attacker to allocate memory arbitrarily, potentially causing the gateway to crash due to an out-...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in github.com/argoproj/argo-cd/v2...

Malicious code in here_lead_generation_v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec03749315d8f69bb656557b7de12b552bef9f87fbffe2307897772c23a35b34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1729 Malicious code in bunny-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdb56dc2493b19a12946344c0395bfb3851aac9a4b34e57f3b5cdb1ab9653e48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pijma-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a0d062249d1376afbf240f8d81230f94dd71f02567ffda1e3c434c4d32b3597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5334 Malicious code in pijma-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a0d062249d1376afbf240f8d81230f94dd71f02567ffda1e3c434c4d32b3597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-hackernews-bootcamp-one-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af727e3e671a551601008e1095480a52cee6345828274261bc66504e7d7af843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3823 Malicious code in ing-flow-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd817301581b6207aff141b16d371ee9f97412a4e4e26b5ca238208be07d1ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uniswap-v2-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36809731348bb0b16418c6c21f3074d63d258f4cd3e03ebab01a693c2f77c204 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6784 Malicious code in uniswap-v2-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36809731348bb0b16418c6c21f3074d63d258f4cd3e03ebab01a693c2f77c204 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cryptoapis-v2-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d42e2d1a0abcbce282cc6bd532e75892d4801811fbd80092ec1c12ba115277a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2254 Malicious code in cryptoapis-v2-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d42e2d1a0abcbce282cc6bd532e75892d4801811fbd80092ec1c12ba115277a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...