MAL-2024-10306 Malicious code in creative_design_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15b9d3a4ef8f0a22d5ff21957427271795b4aa88024b5746a06181ae5918235a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-37929 WordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerability

Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4...

CVE-2024-37929 WordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerability

Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4...

CVE-2024-37929

The solwin User Activity Log Pro WordPress plugin (versions through 2.3.4 ) is affected by a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , specifically identified as a Subscriber+ Multiple Broken Access Contro...

Malicious code in wawawa123s12sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3373d6cdf1ebe94927b4ee361ebbcb1ab21ae82c95836e692ecd16fa1b8eca49 The OpenSSF Package Analysis project identified 'wawawa123s12sd' @ 1.3.10 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10318 Malicious code in abdef (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4eb2fc563b8826f4b9b042759ccb550c442aefe0af7c3c96fe10ec0895cc02ff The OpenSSF Package Analysis project identified 'abdef' @ 1.2.9 npm as malicious. It is considered malicious because: - The package communicates...

Malicious code in abdef (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4eb2fc563b8826f4b9b042759ccb550c442aefe0af7c3c96fe10ec0895cc02ff The OpenSSF Package Analysis project identified 'abdef' @ 1.2.9 npm as malicious. It is considered malicious because: - The package communicates...

CVE-2024-37929: Missing Authorization

Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4...

PT-2024-27834 · Unknown · Solwin User Activity Log Pro

Name of the Vulnerable Software and Affected Versions: solwin User Activity Log Pro versions through 2.3.4 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions throu...

WordPress plugin User Activity Log Pro has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

MAL-2024-10299 Malicious code in @amagioss/js-timecode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cd0e634cb711f3c81ba053e00875d83653e7f7f70757ace4e3234b538bc5c88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10298 Malicious code in blossom-flex-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47d07f8c0d920761bbd8a7c5575c35beae11b8587240d944320d8c88434ad307 The OpenSSF Package Analysis project identified 'blossom-flex-ui' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10271 Malicious code in directv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57af5334c27c7a75d55d6c7459a1d781d609f77d8afe753179b6492c6ac8808 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10281 Malicious code in test-package2345 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 376f2c62728c1d9f82712acd63e4377bd525a0faae2b00a7746dd322c8e5379d The OpenSSF Package Analysis project identified 'test-package2345' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2024-29708 · Unknown · Acr.Browser.Lightning +1

Name of the Vulnerable Software and Affected Versions: com.videodownload.browser.videodownloader aka AppTool-Browser-Video All Video Downloader version 20-30.05.24 Description: The issue allows an attacker to execute arbitrary JavaScript code via the acr.browser.lightning.DefaultBrowserActivity...

Video Downloader security vulnerabilities

Video Downloader is a video downloading application. A security vulnerability exists in Video Downloader version 20-30.05.24. An attacker can exploit this vulnerability to execute arbitrary JavaScript code via the acr.browser.lightning.DefaultBrowserActivity component...

MAL-2024-10259 Malicious code in custom-ui-extension-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab5118124877f1b10d3a788f122b5860bb073bbb94ce2f89305ab74521ade9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10257 Malicious code in dragonhack-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38b1338a8aad6f97922b365716dc5b0b1ae6065a7bbe28daa4c74eefc0155c11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-50073

creationtimestamp| type| source ---|---|--- 2024-10-29 03:03:07+00:00| seen| https://t.me/cvedetector/9231 2025-08-05 12:45:10+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lvnqg5kw5i2y 2025-08-05 12:45:17+00:00| seen|...

MAL-2024-10231 Malicious code in wasabicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffb0fc29ff4926fd2ba01ef1bcfac2bb7f009eca3c1943a131b61b8b2827aa78 The OpenSSF Package Analysis project identified 'wasabicons' @ 98.98.98 npm as malicious. It is considered malicious because: - The package...