MAL-2024-10819 Malicious code in tautoake4-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5bbdacc63f269510ff88a76b84cae8deaa666d09fa9f9272c1463acfdff86e5 The OpenSSF Package Analysis project identified 'tautoake4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in tautoake4-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5bbdacc63f269510ff88a76b84cae8deaa666d09fa9f9272c1463acfdff86e5 The OpenSSF Package Analysis project identified 'tautoake4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in take2-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3caf0d2c986a7f85b5b656b1597d921f3642dca37fd0d5516208e69befb5cf53 The OpenSSF Package Analysis project identified 'take2-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in take3-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3ab74f2bd476e91c4d2e0d1cd29fa80dfb82df59eb0d48c4fd32e6fec28ef39 The OpenSSF Package Analysis project identified 'take3-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in docker-centos-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71090e29427fee974fae520d89e3e7df61c45f9cb63241c5b187c8cf5fd63556 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-43341

Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5...

CVE-2024-43341

Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5...

CVE-2024-43341 WordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5...

CVE-2024-43341

CVE-2024-43341 affects CozyThemes Hello Agency WordPress theme

CVE-2024-43341 WordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5...

WordPress plugin Hello Agency 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

PT-2024-30508 · Cozythemes · Hello Agency

Name of the Vulnerable Software and Affected Versions: CozyThemes Hello Agency versions 1.0.0 through 1.0.5 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 1.0.0 throug...

CVE-2024-43341: Missing Authorization

Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5...

Exploit for Path Traversal in Kau-Boys Hello_World

CVE-2024-9224 Hello World = 2.1.1 - Authenticated Subscri...

CVE-2024-9224

The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...

CVE-2024-9224 Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read

The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...

WordPress Hello World plugin <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read vulnerability

Authenticated Subscriber+ Arbitrary File Read vulnerability discovered by yudha in WordPress Plugin Hello World versions = 2.1.1...

WordPress Hello World Plugin <= 2.1.1 is vulnerable to Arbitrary File Download

Software Hello World Type Plugin Vulnerable versions = 2.1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2024-9224 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 936cc3342bfb Credits yudha Required privilege...

CVE-2024-9224: Improper Limitation of a Pathname to a Restricted Directory

The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...

PT-2024-39503 · WordPress · Hello World

Name of the Vulnerable Software and Affected Versions: Hello World plugin for WordPress versions up to, and including, 2.1.1 Description: The issue allows authenticated attackers with subscriber-level access and above to read the contents of arbitrary files on the server, which can contain...