CVE-2022-29858

The CVE-2022-29858 entry concerns Silverstripe’s assets module up to version 1.10, where improper access control allows publishing protected images by modifying an existing image shortcode in page content. Publicly available connected documents confirm the vulnerable component (silverstripe/asset...

CVE-2022-29858

Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an existing image short code on website content...

CVE-2022-29858: Improper Authentication

Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an existing image short code on website content...

PT-2022-19882

Name of the Vulnerable Software and Affected Versions Silverstripe silverstripe/assets versions through 1.10 Description The issue is related to improper access control, allowing protected images to be published by changing an existing image short code on website content. Specifically, draft...

sell() and buy() should not have whenNotPaused modifier

Lines of code Vulnerability details Impact Impacts are two fold: 1. admin should not be allowed to stop users from selling/cashing out their assets under any circumstance. 2. Due to poor timing or malicious admin activity, it could be the case that buy is put on pause right after initiateBuyout i...

Malicious Package

Overview ledger-live-assets is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious Package

Overview assets-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in auction2-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75309225aa364ef25f31031e76484a959c9e1fd8cee554b6b28793c5a3b7b8f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1167 Malicious code in auction2-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75309225aa364ef25f31031e76484a959c9e1fd8cee554b6b28793c5a3b7b8f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prod_assets_web_modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3873af7a0edde4eed21f230bb2e4c4a23926d90dca82b6b70ca0b9f10258814 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dcrdex-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6be02fbf2b27fe3045237f52ae5f4a78595d536ddb916fe69859173d5cf0c070 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2372 Malicious code in dcrdex-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6be02fbf2b27fe3045237f52ae5f4a78595d536ddb916fe69859173d5cf0c070 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ps-brands-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2157cfaf0f3a46fd498a20e0ed9db4f95c772c753bf21ebd49d591149b7186a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 037ffc75ae9efac1dfb156531f65f3a6e9301fb1db39a9d905346bac028cf5c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zivver/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 252563d49ca0b12c7e64af6a853395f0e071b90cb7e08479fccac1ff8ad07983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-738 Malicious code in @xfinity/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9a1f10d5f6aa7b39416dcfd78a0c6036c840ddd308e7c1a988e46acccc39046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-795 Malicious code in @zivver/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 252563d49ca0b12c7e64af6a853395f0e071b90cb7e08479fccac1ff8ad07983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-790 Malicious code in @youporn/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 603675e7aa067faae6c76ee52b00ad6f559d71e6fdb60afbe06533dc0739c02b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-708 Malicious code in @volkswagen/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0787eda26a60e4dc7bae988256e6b515c8037fe092f29e2caa710149a768631e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-711 Malicious code in @vwcredit/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0727eab8f4ba3cdfba4ce2fbc8f21694cc3d4e7a02c07be30192ac7cc31ae78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...