CVE-2023-47109 PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block

PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that the store is trustworthy. When adding a block in blockreassurance module, a BO user can modify the http request and give the path of any file in the project instead of an image...

CVE-2023-47109 PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block

PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that the store is trustworthy. When adding a block in blockreassurance module, a BO user can modify the http request and give the path of any file in the project instead of an image...

PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block

Impact When adding a block in blockreassurance module, a BO user can modify the http request and give the path of any file in the project instead of an image. When deleting the block from the BO, the file will be deleted. It is possible to make the website completely unavailable by removing...

MAL-2023-8195 Malicious code in @zettle-bo/customers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c222564ede1b67fef2b761bcbbfd8cb38be11a71c514a6d2e6efa1e7ca9b46b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8201 Malicious code in @zettle-bo/pp-profile-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1620f673435e4da925d2327f2d50d0ab0b66532cdb1d19d87accae90da85ac3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/react-router-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d15f8bb2c4ca588ab243f077851d021201eb274122b32a38b91cc93d7d03d1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5aa58a36545bf3bfb7acfdee7ca0ccfeef15bb87c3e2c31651f41e8fa9070026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8207 Malicious code in @zettle-bo/routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5aa58a36545bf3bfb7acfdee7ca0ccfeef15bb87c3e2c31651f41e8fa9070026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b961ea11cf720196d00489b643e7085441ce41efe9d21ef3d77b4f24c1238ef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/products (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ae659d6471ddd10c2df563bcbd87d95e83cd34677101c317b5246e9d19b14b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8197 Malicious code in @zettle-bo/direct-debit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e6f4aa58a67054f3bd6830bfbfd2e23c6e7bfe7c7ef070fc3306b2513844832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/receipts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f074405b00ebdd38c3d826a75574548f1f1b7c544506344f2fa7ecd28a210885 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8206 Malicious code in @zettle-bo/receipts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f074405b00ebdd38c3d826a75574548f1f1b7c544506344f2fa7ecd28a210885 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8200 Malicious code in @zettle-bo/invoices (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 396cb6377e3adb994eacdae5dfc8df633bb4e320f9bff443b955c8d0e1bed43d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8192 Malicious code in @zettle-bo/bootstrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 348b20a3785062502338cff3dc24b6f6ed6d517924be7055ceb59e444232a7cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8209 Malicious code in @zettle-bo/settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fba492d667a05fc7319b7f2a8b78d3c30055af809eb17047766ddd8e1b747898 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: drm/amdgpu: Fix use-after-free on amdgpu_bo_list mutex

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free on amdgpubolist mutex If amdgpucsvmhandling returns r != 0, then it will unlock the bolistmutex inside the function amdgpucsvmhandling and again on amdgpucsparserfini. This problem results in the...

Spoofing

PrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vulnerability. A BO user can write, update, and delete in the database, even without having specific rights. PrestaShop 8.0.4 and 1.7.8.9 contain a patch for this issue. There are ...

GSD-2022-1007138 drm/virtio: Check whether transferred 2D BO is shmem

drm/virtio: Check whether transferred 2D BO is shmem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006902 drm/virtio: Check whether transferred 2D BO is shmem

drm/virtio: Check whether transferred 2D BO is shmem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...