MAL-2024-10716 Malicious code in newbharatv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bccffdbbaea730330c6b6156aac69a4852d53debfa863456e47b3d3cb0c53561 The OpenSSF Package Analysis project identified 'newbharatv2' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-10793

The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the userid parameter in all versions up to, and including, 5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

MAL-2024-10773 Malicious code in rct-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d42a5f1b620b206b85fa553b60cc9f0bba3f0b16ab0d8ba57a635125fb3f28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10714 Malicious code in erc4337 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 331ff3b73d0d5c94f6156a7afd0dc8aaf6b6b0c316abbe82155de79a1e26d130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atlas-query-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6c37cad26e052e458501d412ce970fc2faf0d3ce12d6e7b5794e6161ab7e4d8 The OpenSSF Package Analysis project identified 'atlas-query-editor' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-10713 Malicious code in atlas-query-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6c37cad26e052e458501d412ce970fc2faf0d3ce12d6e7b5794e6161ab7e4d8 The OpenSSF Package Analysis project identified 'atlas-query-editor' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-10769 Malicious code in preact-cli-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b97d147bbe2f906512da2cfa2de62ecc0c18b2afd14ceb1dfd755122300ea57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-16552

Name of the Vulnerable Software and Affected Versions WP Activity Log plugin for WordPress versions up to, and including, 5.2.1 Description The issue is related to Stored Cross-Site Scripting via the user id parameter due to insufficient input sanitization and output escaping. This allows...

PT-2024-10583 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a read/write serialization problem in the read function of ProcessStats.java, which can lead to a permissions bypass. This could result in local escalation of...

CVE-2024-10793: Improper Neutralization of Input During Web Page Generation

The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the userid parameter in all versions up to, and including, 5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

WordPress plugin WP Activity Log: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2024-48967 Life2000 ventilator and Service PC lack sufficient audit logging capabilities

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings...

CVE-2024-48967

The CVE-2024-48967 entry concerns Baxter Life2000 ventilator and associated Service PC, where inadequate audit logging prevents detection of malicious activity. The description states that an attacker with access could alter ventilator settings without detection, leading to unauthorized informati...

CVE-2024-48967 Life2000 ventilator and Service PC lack sufficient audit logging capabilities

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings...

WordPress WP Activity Log plugin <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by mikemyers in WordPress Plugin WP Activity Log versions = 5.2.1...

MAL-2024-10767 Malicious code in people-rn-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 681ed628388433ac94a7fae9dc863ce558f90b455be767d11efd4b5f0ad7bd97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opa-fe-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0912f1fa265b4c148d99d5ebf17f99f098efa46a5222a44acee011d8ab0680df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10760 Malicious code in mkt-worker-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf8971f053ecded5e4c81fa201da46f7838e79cf6635808be72fa828ae029a22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10759 Malicious code in mkt-snakecase-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61e863528bc4c149274dad3b83fb474326e0d0d2ab5134d9529c0099688515e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10757 Malicious code in markservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 967b4b4c0264a9fff8d309834b2a12350b0db8f50f86f487903ce1556d628d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...