MAL-2024-2620 Malicious code in linkinbio-web-components (npm)

--- -= Per source details. Do not edit below this line.=-...

The vulnerabilities of the components dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi, and seama.cgi of the D-LINK GO-RT-AC750 router’s microprogramming system allow a attacker to perform XSS attacks.

The vulnerability of the dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi, and seama.cgi components of the D-LINK GO-RT-AC750 router software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow an attacker, operating remotely, to carry ou...

The vulnerabilities of the components org.xwiki.platform:xwiki-platform-web and org.xwiki.platform:xwiki-platform-web-templates of the XWiki platform for creating collaborative web applications. XWiki allows attackers to execute arbitrary code.

The vulnerabilities of the components org.xwiki.platform:xwiki-platform-web and org.xwiki.platform:xwiki-platform-web-templates of the XWiki Platform allow attackers to execute arbitrary code. The XWiki Platform is vulnerable due to a lack of mechanisms for escaping output data. Exploiting these...

The vulnerability of the web components of Ivanti Connect Secure and Ivanti Policy Secure control tools allows a perpetrator to…

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure web components related to access control vulnerabilities. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the level of an administrator...

CVE-2024-21888

A privilege escalation vulnerability in web component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows a user to elevate privileges to that of an administrator...

The vulnerability of the web components of Ivanti Connect Secure and Ivanti Policy Secure control tools allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure web components related to authentication procedures’ flaws. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending specially crafted requests...

CVE-2024-21887

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

CVE-2024-21887

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

Command injection

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

CVE-2024-21887

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

VulnCheck KEV: CVE-2024-21887

Ivanti Connect Secure ICS, formerly known as Pulse Connect Secure and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted requests to execute code on affected appliances. This...

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

Ivanti Connect Secure ICS, formerly known as Pulse Connect Secure and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted requests to execute code on affected appliances. This...

Malicious code in zoo-web-components-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5a033ba4e84e9b29f5eb20d41c448241b24f20fb48b6ad382babb24543441f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8508 Malicious code in zoo-web-components-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5a033ba4e84e9b29f5eb20d41c448241b24f20fb48b6ad382babb24543441f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Updates for Skype for Business Server 2019 (KB4470124)

None None...

Malicious Package

Overview cvent-web-components is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

MAL-2022-2291 Malicious code in cvent-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fb3c6feabc769a5b68e6c52a29ed619c645b3dbb7c78c9b6313affab4d47f44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cvent-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fb3c6feabc769a5b68e6c52a29ed619c645b3dbb7c78c9b6313affab4d47f44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2755 Malicious code in enviso-web-components-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d75a7c878177290aa6c8c20615f8d9c791e5461f2f344511808c3ccc48e63da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gopro-web-javascript-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbd5c887f1ae7f927a94580db5eb195ca0a078262261f58af907566bcda2568e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...