MAL-2024-1138 Malicious code in u-workflow.module.common.features (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 43c063fa58fdcf0f64acc12e433390c9dc078ab6b6eb6dd773242db454f29a47 The OpenSSF Package Analysis project identified 'u-workflow.module.common.features' @ 1.0.1 npm as malicious. It is considered malicious because...

PT-2024-23100

Name of the Vulnerable Software and Affected Versions Sentrifugo version 3.2 Description The issue is related to a SQL injection vulnerability. It affects the "/sentrifugo/index.php/reports/activitylogreport" API endpoint, specifically the sortby parameter. This could allow a remote user to send ...

CVE-2024-2291

In Progress MOVEit Transfer versions released before 2022.0.11 14.0.11, 2022.1.12 14.1.12, 2023.0.9 15.0.9, 2023.1.4 15.1.4, a logging bypass vulnerability has been discovered. An authenticated user could manipulate a request to bypass the logging mechanism within the web application which result...

CVE-2024-2291 MOVEit Transfer Logging Bypass Vulnerability

In Progress MOVEit Transfer versions released before 2022.0.11 14.0.11, 2022.1.12 14.1.12, 2023.0.9 15.0.9, 2023.1.4 15.1.4, a logging bypass vulnerability has been discovered. An authenticated user could manipulate a request to bypass the logging mechanism within the web application which result...

CVE-2024-2291 MOVEit Transfer Logging Bypass Vulnerability

In Progress MOVEit Transfer versions released before 2022.0.11 14.0.11, 2022.1.12 14.1.12, 2023.0.9 15.0.9, 2023.1.4 15.1.4, a logging bypass vulnerability has been discovered. An authenticated user could manipulate a request to bypass the logging mechanism within the web application which result...

CVE-2024-1145

creationtimestamp| type| source ---|---|--- 2024-03-19 13:26:45+00:00| seen| https://t.me/ctinow/211445 2024-03-19 13:31:19+00:00| seen| https://t.me/ctinow/211464...

MAL-2024-1128 Malicious code in abcotv-story-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis acdca40d7226a0452c39c1be5b95b2d07cc8a6bdbdd80b37274c8e8150ca5400 The OpenSSF Package Analysis project identified 'abcotv-story-parser' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

PT-2024-18471 · WordPress · Simple Ajax Chat

Name of the Vulnerable Software and Affected Versions: The Simple Ajax Chat WordPress plugin versions prior to 20240223 Description: The issue concerns the reflection of unsanitized input to other users, specifically when visitors use malicious names in the chat. This allows for potential malicio...

MAL-2024-1112 Malicious code in abcotv-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b2032a43dcea9b545087dcd1d72c8b8b1d34ecba06d2df5a34e6a463243ece5 The OpenSSF Package Analysis project identified 'abcotv-ads' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2019-20096

creationtimestamp| type| source ---|---|--- 2024-03-18 11:21:07+00:00| seen| https://t.me/ctinow/210382...

MAL-2024-1104 Malicious code in lyft-exceptions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5e0290aaa0cb90a501cb0a0b357f32d3e725f6f3a97541cbc2796671ea4e8f60 The OpenSSF Package Analysis project identified 'lyft-exceptions' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...

CVE-2019-15915

creationtimestamp| type| source ---|---|--- 2024-03-16 10:16:45+00:00| seen| https://t.me/ctinow/209457...

CVE-2024-24845

creationtimestamp| type| source ---|---|--- 2024-03-16 06:26:18+00:00| seen| https://t.me/ctinow/209354 2024-03-16 06:26:24+00:00| seen| https://t.me/ctinow/209358...

Malicious code in ouramerica-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5e8ad6206cb55fdcb549168be1855e019bdc7745420d9b12074c0d682e66d50 The OpenSSF Package Analysis project identified 'ouramerica-constants' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

CVE-2019-3994

creationtimestamp| type| source ---|---|--- 2024-03-15 06:36:43+00:00| seen| https://t.me/ctinow/208436...

MAL-2024-1098 Malicious code in geico_design_kit2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb947e32f21c9faa279b825aa5989d3a6fcbe09de00409c630dd824dc5ce42f0 The OpenSSF Package Analysis project identified 'geicodesignkit2' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-43490

creationtimestamp| type| source ---|---|--- 2024-03-14 18:22:46+00:00| seen| https://t.me/ctinow/208011 2024-03-14 18:27:00+00:00| seen| https://t.me/ctinow/208028...

Malicious code in fhir.base.template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d390c24638a730f4667334b430b5a02e28305f199a61a609e88c28c3dd5f5b36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1093 Malicious code in sdge-it-tdg-dynamicloadprofiles-sempra-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d7a435ca75f0214af0cf902eeb6293bba2778f04c71cc5afd45ac109c0a78c5 The OpenSSF Package Analysis project identified 'sdge-it-tdg-dynamicloadprofiles-sempra-poc' @ 2.0.2 npm as malicious. It is considered maliciou...

MAL-2024-1092 Malicious code in wm-lib-api-error-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9c48e2ab0480956dd0db4c0bc2e946be8a52112fb31f959900edb9a914f02367 The OpenSSF Package Analysis project identified 'wm-lib-api-error-handler' @ 1.0.2 npm as malicious. It is considered malicious because: - The...