CVE-2024-25034 IBM Planning Analytics file upload

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing further attac...

CVE-2024-25034

CVE-2024-25034 affects IBM Planning Analytics 2.0 and 2.1, where the File Manager T1 process does not validate file types, allowing upload of executable/malicious files. IBM’s Security Bulletin notes this as a Malicious File Upload vulnerability (CWE-434) with high impact (CVE has base scores up ...

CVE-2024-25034 IBM Planning Analytics file upload

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing further attac...

Malicious code in meli-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb28bf7bab07e7d8ce966bd32c13cf1917b50adade7a33b66bb6e39c74710827 The OpenSSF Package Analysis project identified 'meli-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-544 Malicious code in meli-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb28bf7bab07e7d8ce966bd32c13cf1917b50adade7a33b66bb6e39c74710827 The OpenSSF Package Analysis project identified 'meli-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45ea901132edd2a569f451644d222beedfd715a037c809451b5ac84bd1e506a1 The OpenSSF Package Analysis project identified 'lyft-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-521 Malicious code in lyft-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45ea901132edd2a569f451644d222beedfd715a037c809451b5ac84bd1e506a1 The OpenSSF Package Analysis project identified 'lyft-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-510 Malicious code in linkedin-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a93b00bc04ea5218384795d0a4ce28aef30047e797c5bfa33e15d2e7b799011 The OpenSSF Package Analysis project identified 'linkedin-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in linkedin-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a93b00bc04ea5218384795d0a4ce28aef30047e797c5bfa33e15d2e7b799011 The OpenSSF Package Analysis project identified 'linkedin-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-483 Malicious code in iberia-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dbeb23de83ef06752a7c78f785f0b4cde49252cd16b137dd3e3fec73e2714bfc The OpenSSF Package Analysis project identified 'iberia-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in iberia-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dbeb23de83ef06752a7c78f785f0b4cde49252cd16b137dd3e3fec73e2714bfc The OpenSSF Package Analysis project identified 'iberia-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62fa8d8bde72e741fd412c45be6204f6e5084e0bf9a36f2206a150e7d5decb83 The OpenSSF Package Analysis project identified 'godaddy-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-457 Malicious code in godaddy-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62fa8d8bde72e741fd412c45be6204f6e5084e0bf9a36f2206a150e7d5decb83 The OpenSSF Package Analysis project identified 'godaddy-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in coinbase-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2e0ebbff8d23dcfd127928b6090da6f7a5ee14f0c1bd70fc9068e133d935fc3 The OpenSSF Package Analysis project identified 'coinbase-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-414 Malicious code in coinbase-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2e0ebbff8d23dcfd127928b6090da6f7a5ee14f0c1bd70fc9068e133d935fc3 The OpenSSF Package Analysis project identified 'coinbase-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-394 Malicious code in bookingcom-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f32c3da478ba3712d3de331495d003e14f2fd28a94f708a94c9ed9881f50dc06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bookingcom-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f32c3da478ba3712d3de331495d003e14f2fd28a94f708a94c9ed9881f50dc06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-369 Malicious code in amazon-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12894a12a5148065c49468c741a4ba9eedea8c2a1c90262be5e3263553730582 The OpenSSF Package Analysis project identified 'amazon-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12894a12a5148065c49468c741a4ba9eedea8c2a1c90262be5e3263553730582 The OpenSSF Package Analysis project identified 'amazon-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

IBM Planning Analytics 代码问题漏洞

IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines IBM. The solution supports automated execution of processes such as business planning, budgeting, and analysis. A code issue vulnerability exists in IBM Planning Analytics versions 2.0...