MAL-2023-1338 Malicious code in vote-chatbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19c7207472bfc0beece07f85734b2c399c40fc27dd1cfac03ca92492bbbc7cad The OpenSSF Package Analysis project identified 'vote-chatbot' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...

Malicious code in vote-chatbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19c7207472bfc0beece07f85734b2c399c40fc27dd1cfac03ca92492bbbc7cad The OpenSSF Package Analysis project identified 'vote-chatbot' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1336 Malicious code in videosdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da3ca7587089ca66e194fccd2af2ed17b7a7de7db4445c0aedb8c72fe70d60e6 The OpenSSF Package Analysis project identified 'videosdk-web' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...

Malicious code in videosdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da3ca7587089ca66e194fccd2af2ed17b7a7de7db4445c0aedb8c72fe70d60e6 The OpenSSF Package Analysis project identified 'videosdk-web' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...

MAL-2023-587 Malicious code in meetingsdk-sample-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b35b4caef11623ed6a19de27a6ca20f776482dc18bfe6fb11b3d852adb69eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1321 Malicious code in thentiacloud-angularjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 080925c1a04cb601b6c5a204f7e8db92592ee52721272a7effa1eb5caf5207c8 The OpenSSF Package Analysis project identified 'thentiacloud-angularjs' @ 1.2.0 npm as malicious. It is considered malicious because: - The...

User Activity Log < 1.6.3 - Admin+ SQL Injection

The plugin does not properly sanitise and escape the txtsearch parameter before using it in a SQL statement in some admin pages, leading to a SQL injection exploitable by high privilege users such as admin. As an admin, visit either of the following URL's. Note that it takes several seconds for t...

User Activity Log < 1.6.3 - Admin+ SQL Injection

The plugin does not properly sanitise and escape the txtsearch parameter before using it in a SQL statement in some admin pages, leading to a SQL injection exploitable by high privilege users such as admin. PoC As an admin, visit either of the following URL's. Note that it takes several seconds f...

MAL-2023-621 Malicious code in next-with-frontegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 251ac37afbe61350facc80a00faa97821168ad425857f580f6fa33910fbd78eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 38 Update: sysstat-12.7.4-1.fc38

The sysstat package contains the sar, sadf, mpstat, iostat, tapestat, pidstat, cifsiostat and sa tools for Linux. The sar command collects and reports system activity information. The information collected by sar can be saved in a file in a binary format for future inspection. The statistics...

MAL-2023-1167 Malicious code in dreamotp1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d32ee7888ccbfab9c37e855e72a334e3fc63f65383d2e0ab391428f91ab61bf7 The OpenSSF Package Analysis project identified 'dreamotp1' @ 17.2.2 npm as malicious. It is considered malicious because: - The package...

CVE-2023-32622

creationtimestamp| type| source ---|---|--- 2023-06-30 12:15:08+00:00| seen| https://t.me/cibsecurity/65777...

MAL-2023-1288 Malicious code in schweppes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6413b14065c0dae4dd031864f7a515ead037541f7f74a2907a2d554ebe4e7fe The OpenSSF Package Analysis project identified 'schweppes' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1219 Malicious code in jquery-overscroll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 279b9014e86c11c82ac819b5e3bbbbbfc2868e3131b65bd941e60d08985cfbb0 The OpenSSF Package Analysis project identified 'jquery-overscroll' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-21518

Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity...

CVE-2023-21518

Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity...

Improper access control

Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity...

CVE-2023-21173

In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-26615

creationtimestamp| type| source ---|---|--- 2023-06-28 18:13:23+00:00| seen| https://t.me/cibsecurity/65625...

CVE-2023-21173

CVE-2023-21173 affects Android 13 where multiple methods in DataUsageList.java can reveal admin network activity due to a missing permission check, enabling local information disclosure with no extra privileges or user interaction. The vulnerability is documented across multiple feeds (NVD, Red H...