SUSE CVE-2022-25647

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lead to DoS attacks...

CVE-2023-0255

The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites...

CVE-2023-0255

The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites...

Design/Logic Flaw

The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites...

CVE-2023-0255 Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload

The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites...

WordPress plugin Enable Media Replace 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

PT-2023-16115 · WordPress · Enable Media Replace

Name of the Vulnerable Software and Affected Versions: Enable Media Replace WordPress plugin versions prior to 4.0.2 Description: The issue allows authors to upload arbitrary files to the site, potentially enabling them to upload PHP shells on affected sites. Recommendations: For Enable Media...

MAL-2023-1890 Malicious code in ktcalendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3dae7c8d1185e6518c9e9358deb5aaa5806eb6b2b206a8b05731baa4a45a5b9c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2319 Malicious code in tkcalednar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2751263c8ef9db6ea790ea61f6c7150637a90527d732057cb54706619c31cca7 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1606 Malicious code in beautifullsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 04548ce815bd23055174dcc824e420faa7e2b47ba62b0fe5fdc944bc2fed31c8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-tooklit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0292eb70515cacbc039258076708c4c85c30f09fa372c21c108efbea1a264615 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-otolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 33a53acb696e4b7effb680ca3abc3b18e14006ec92d050945cf6cc35c5f9f30c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2018 Malicious code in prrogressbar2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 680dfe7acbee32bd2d2d173aef012941a96efab39b45aa66f83c570cdf2fdeed Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in diiscord-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7e0cbb67d61a781be45742353ac7c013d21e8fdbae13544700dedd778b19a0d3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1774 Malicious code in discoord-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 68df26950a7ff2b46cdf12d50fb094b9ff5f9f7020f2a3c56e945f753289057c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2262 Malicious code in simplesjon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 67b6a5d183a9da248776af91173df5a05331179fd1c5a0241ae881c200cf8433 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2257 Malicious code in simplejsno (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 87bea338e2fd38835634fd7646c5951fa1b84e405e875c244a97e2835cba6ebb Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in simplejsno (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 87bea338e2fd38835634fd7646c5951fa1b84e405e875c244a97e2835cba6ebb Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in openppyxl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 158f47d1df57c93140af53f4f53ce4ec806aa0adb6d7d41b6ef7cddddc500428 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in openpylx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fa557a837d122507fd3d3a470df47be40bfff3d9df6fc6ec0553b1c764fccd38 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...