Exploit for Deserialization of Untrusted Data in Veeam Veeam_Backup_\&_Replication

CVE-2024-40711-poc CVE-2024-40711 is a serious vulnerability...

Malicious code in graph-studio-billing-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd4325b249b7dfad124c21ffe39f85d2e38f1b6c2d31361f81e821adb8365ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10885 Malicious code in @framgia/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a84ece988632f5b1341c70168c0e8ca664277c904e9aae19d1541c7f7e2df3c8 The OpenSSF Package Analysis project identified '@framgia/test' @ 9.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10882 Malicious code in codeql-sarif-security-standard-annotator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daf28531c7b9ae5e115da81a3041d6e35bed2b6764cfabb14fdd1b11ff50a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10879 Malicious code in ap-components-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b75060f671ee7ecddf3938775343212154c5eb91d9e4fba478a1f6062457b9c8 The OpenSSF Package Analysis project identified 'ap-components-react' @ 3.15.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-10877 Malicious code in newpipv3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 54fac2a807bae6742d82c86f55d97a1b4a810e42ee3b0b9dcb0c981c36ab712d The OpenSSF Package Analysis project identified 'newpipv3' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

Malicious code in newpipv3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 54fac2a807bae6742d82c86f55d97a1b4a810e42ee3b0b9dcb0c981c36ab712d The OpenSSF Package Analysis project identified 'newpipv3' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-10890 Malicious code in webpack-svg-spirit-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e06e486295eccd406df5d378ae3d70ad72e5be5dad6bd5d99fde1d16e324f5af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10889 Malicious code in webpack-support-multi-domain-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df28dfaede54bce66eb7320e580118358e8db8869c014298d0a7abb4a0e43497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-support-multi-domain-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df28dfaede54bce66eb7320e580118358e8db8869c014298d0a7abb4a0e43497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-49054

creationtimestamp| type| source ---|---|--- 2024-11-22 01:38:35+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113524048830700209 2024-11-22 14:43:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113527136963470290 2024-11-22 15:44:04+00:00| seen|...

MAL-2024-10887 Malicious code in web_enhance_sap-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1929ef8619831ff03c7cb7059585b7c1004f18089f8a438ea4b45648363dc924 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10886 Malicious code in web-chat-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1410c02449b7f9317f68317b69ec23e5601c189018c375ccdcb1d453def943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10876 Malicious code in viz_schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e689b8cfd5c43cd35b51823085d1f772fa517d58837f56093c7d699294fde3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10875 Malicious code in vite-plugin-unus-api-register (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79ccf9234ae6ea621dca31ab486d57d162d4c344342f26de0924579cb3b2d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10872 Malicious code in uss-vod-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f069de485e57ad5262d4b158a8a64d396cae1798fd4fa85cf2802ac7fec711e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10788

The WordPress plugin Activity Log – Monitor & Record User Changes (up to version 2.11.1) is affected by a Stored Cross-Site Scripting (XSS) flaw in the event context due to insufficient input sanitization and output escaping. Unauthenticated attackers could inject arbitrary scripts that run when ...

CVE-2024-10788 Activity Log – Monitor & Record User Changes <= 2.11.1 - Unauthenticated Stored Cross-Site Scripting via Event Context

The Activity Log – Monitor & Record User Changes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the event parameters in all versions up to, and including, 2.11.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

MAL-2024-10869 Malicious code in storage-atom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f8d850e9e2955072a6fa29c079bda39350473f9ba56b3efec63bcc7e283c563 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-16547 · WordPress · The Activity Log – Monitor & Record User Changes

Name of the Vulnerable Software and Affected Versions: The Activity Log – Monitor & Record User Changes plugin for WordPress versions up to, and including, 2.11.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing...