MAL-2024-21 Malicious code in casino-prismic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 906aeb8612a57f084f489c6478da61b9c148272104fed2d5838a07b97704cd26 The OpenSSF Package Analysis project identified 'casino-prismic' @ 4.6.8 npm as malicious. It is considered malicious because: - The package...

RHSA-2024:0029

creationtimestamp| type| source ---|---|--- 2024-01-02 17:17:31+00:00| seen| https://t.me/ctinow/161897...

MAL-2024-3 Malicious code in hubl-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c48b757cf4e86cc97abb28765fdf3f0a2205e99bbcf856ec3904b7e02038fea0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-2 Malicious code in @cartus-core/cartus-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00ecedfab923e26d9afa1c15157b18d4f9662f062ffec7f4ce93ece0426eeeda The OpenSSF Package Analysis project identified '@cartus-core/cartus-common-ui' @ 11230000951.0.1 npm as malicious. It is considered malicious...

MAL-2024-1 Malicious code in squaredev-next-online-payments-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c12aadbc7b6d08bd4746e705c7507074eb759ac60f260bdf9a59cd85d966a45b The OpenSSF Package Analysis project identified 'squaredev-next-online-payments-example' @ 99.0.0 npm as malicious. It is considered malicious...

CVE-2023-7184

creationtimestamp| type| source ---|---|--- 2023-12-31 12:26:31+00:00| seen| https://t.me/ctinow/161071 2024-01-01 01:31:54+00:00| seen| https://t.me/cibsecurity/74066 2024-01-22 08:06:48+00:00| seen| https://t.me/ctinow/171018...

CVE-2023-48122

creationtimestamp| type| source ---|---|--- 2023-12-31 10:16:51+00:00| seen| https://t.me/ctinow/161046...

CVE-2023-52284

creationtimestamp| type| source ---|---|--- 2023-12-31 07:26:52+00:00| seen| https://t.me/ctinow/160993 2024-01-01 01:30:55+00:00| seen| https://t.me/cibsecurity/74054 2024-01-08 23:17:24+00:00| seen| https://t.me/ctinow/164697 2024-01-22 10:11:20+00:00| seen| https://t.me/ctinow/171065...

MAL-2023-8775 Malicious code in ngx-ndbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b85b4ba8a7146a1450ff0a1cc8b119bda90a838d67b93d8ad4f080551bfe002e The OpenSSF Package Analysis project identified 'ngx-ndbx' @ 18.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8776 Malicious code in discord.js-self-v22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 672d9ccd18153a9163f1f9a63ec5d765f412cf86a198d526fb04ecc5aa6eab3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8774 Malicious code in unit-testing-controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206ebabfab4ea20b85ed6293c085ea8a6c0c0d85a70a1616a1963ac8556cf315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-23634

SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint...

Documize Security Breach

Documize is an open source document collaboration system built on Golang and EmberJS. A security vulnerability exists in Documize version 5.4.2, which stems from an SQL injection vulnerability. The vulnerability allows remote attackers to execute arbitrary code via user parameters in the...

CVE-2023-23634

SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint...

GHSA-4WVW-75QH-FQJP

creationtimestamp| type| source ---|---|--- 2023-12-28 23:46:12+00:00| seen| https://t.me/ctinow/160249 2024-01-20 16:16:28+00:00| seen| https://t.me/ctinow/170661...

MAL-2023-8759 Malicious code in spectrum-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2eb941fc5a07c41506c9bdc68d1b469aad8f8b70b2258d975d0a6255516c5f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-19094 · Documize · Documize

Name of the Vulnerable Software and Affected Versions: Documize version 5.4.2 Description: The issue allows remote attackers to execute arbitrary code via the user parameter of the "/api/dashboard/activity" endpoint. This enables attackers to potentially gain unauthorized access and control over...

com.sdjictec.qdmetro Security Vulnerabilities

com.sdjictec.qdmetro is a component. A security vulnerability exists in com.sdjictec.qdmetro version 4.2.2, which originates in the component AdSdkH5Activity that allows an attacker to send and directly open a malicious URL, or download a malicious application...

CVE-2023-49003

An issue in simplemobiletools Simple Dialer 5.18.1 allows an attacker to bypass intended access restrictions via interaction with com.simplemobiletools.dialer.activities.DialerActivity...

CVE-2023-47882

The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.920231127 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component...