MAL-2024-7492 Malicious code in sap-activation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8ede7025f37f71f86c3d2f05193b60a291c6ab41c478fc2b90719134ada73cfe The OpenSSF Package Analysis project identified 'sap-activation' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7495 Malicious code in sap-activkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5bcf3290f8461ce6ff5c8a8ebc248fd690b03bcb7506c7387a878e6b59c0e34a The OpenSSF Package Analysis project identified 'sap-activkey' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7498 Malicious code in sap-add (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85f549efd6de238e8a117fb3cf7a8b574d3d7ea9cbcf639e22eef77987d7364a The OpenSSF Package Analysis project identified 'sap-add' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in sap-activity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3e0a5149544b867f2487852926e46eba534638de827b17055beda04b632dbe63 The OpenSSF Package Analysis project identified 'sap-activity' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7489 Malicious code in sap-actionfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1ddc8179af4dd85a502b57776b8f45e5e370057c128851a174d17f16288db2de The OpenSSF Package Analysis project identified 'sap-actionfile' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-actionfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1ddc8179af4dd85a502b57776b8f45e5e370057c128851a174d17f16288db2de The OpenSSF Package Analysis project identified 'sap-actionfile' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7488 Malicious code in sap-action2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a7074778f420cd6e72cd47c261e9d9628b1b4257940eb2224ba02a924ed3706 The OpenSSF Package Analysis project identified 'sap-action2' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-action2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a7074778f420cd6e72cd47c261e9d9628b1b4257940eb2224ba02a924ed3706 The OpenSSF Package Analysis project identified 'sap-action2' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in secnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a9e8a7599691831cd3f6a1111dfd17e5b50219d9eabcfffa1ff08edb10be6d8c The OpenSSF Package Analysis project identified 'secnav' @ 69.69.69 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7438 Malicious code in eslint-plugin-ally-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23310826a7310567370020e364d6dedeb87558d2ce0ffcf5bc6054d70951bf3c The OpenSSF Package Analysis project identified 'eslint-plugin-ally-rules' @ 1.0.5 npm as malicious. It is considered malicious because: - The...

Malicious code in job-specs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 33cc6191f6fbd8274e7eb5fe159654ded5d7fadbdc6fe26dbb62b26c0ddd42ed The OpenSSF Package Analysis project identified 'job-specs' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in aroly-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5559e3338ab9d433fec892063a5f0ec5ac1164490196c5a095bc2ffb723e6290 The OpenSSF Package Analysis project identified 'aroly-test' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...

CVE-2024-31316

In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-31316

In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-31316

In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

WordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerability

Subscriber+ Multiple Broken Access Control vulnerability discovered by Dave Jong Patchstack in WordPress Plugin User Activity Log Pro versions = 2.3.4...

CVE-2024-31316: Undefined Security Weakness

In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-23964 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue is related to a parcel mismatch in the onResult method of AccountManagerService.java, which could allow an arbitrary background activity launch. This could lead to local...

VulnCheck KEV: CVE-2024-37929

Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4...

WordPress User Activity Log Pro Plugin <= 2.3.4 is vulnerable to Broken Access Control

Software User Activity Log Pro Type Plugin Vulnerable versions = 2.3.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37929 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID a51ba27e9212 Credits Dave Jong Patchstac...