Malicious code in @zitterorg/ullam-veniam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05981a78c3f01e0e4631397b06b32a0165ba36061bd3098a8d08fec8e03c2a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Sharp Multi-Function Printer 18 Vulnerabilities

Hello, Please find a text-only version below sent to security mailing lists. The complete version on "17 vulnerabilities in Sharp Multi-Function Printers" is posted here: https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html The text version is also posted here:...

South Korean ERP Vendor's Server Hacked to Spread Xctdoor Malware

An unnamed South Korean enterprise resource planning ERP vendor's product update server has been found to be compromised to deliver a Go-based backdoor dubbed Xctdoor. The AhnLab Security Intelligence Center ASEC, which identified the attack in May 2024, did not attribute it to a known threat act...

WordPress Taager Plugin <= 1.16.0 is vulnerable to Backdoor

Software Taager Type Plugin Vulnerable versions = 1.16.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID d9d1b77af81a Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Canvas-Nest.js Plugin <= 1.0.1 is vulnerable to Backdoor

Software Canvas-Nest.js Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5b218a741bed Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Jobs.af Plugin <= 1.0.1 is vulnerable to Backdoor

Software Jobs.af Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 91427fbfaa3a Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Product Customer List for WooCommerce Plugin <= 3.1.6 is vulnerable to Backdoor

Software Product Customer List for WooCommerce Type Plugin Vulnerable versions = 3.1.6 Fixed in 3.1.7 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 23316ac7b932 Credits Sansec.io Required privilege Unauthenticate...

WordPress Amelia Plugin <= 1.1.8 is vulnerable to Backdoor

Software Amelia Type Plugin Vulnerable versions = 1.1.8 Fixed in 1.1.9 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9adf81355a51 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Word Balloon Plugin <= 4.22.1 is vulnerable to Backdoor

Software Word Balloon Type Plugin Vulnerable versions = 4.22.1 Fixed in 4.22.2 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8a74f733243a Credits Sansec.io Required privilege Unauthenticated Published 3 July, 202...

WordPress Viva Payments Plugin <= 1.2 is vulnerable to Backdoor

Software Viva Payments Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 655c4e982e2a Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Magic Conversation For Gravity Forms Plugin <= 3.0.94 is vulnerable to Backdoor

Software Magic Conversation For Gravity Forms Type Plugin Vulnerable versions = 3.0.94 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5926a0e977a5 Credits Sansec.io Required privilege Unauthenticated...

WordPress WP User Frontend Plugin <= 4.0.7 is vulnerable to Backdoor

Software WP User Frontend Type Plugin Vulnerable versions = 4.0.7 Fixed in 4.0.8 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b7d6d9c8134f Credits Sansec.io Required privilege Unauthenticated Published 3 July,...

WordPress weForms Plugin <= 1.6.23 is vulnerable to Backdoor

Software weForms Type Plugin Vulnerable versions = 1.6.23 Fixed in 1.6.24 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 83328c8ce30e Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress nicen-localize-image Plugin <= 1.4.1 is vulnerable to Backdoor

Software nicen-localize-image Type Plugin Vulnerable versions = 1.4.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9cc7d9fd0cd5 Credits Sansec.io Required privilege Unauthenticated Published 3 July,...

WordPress CommandBar for WP Admin Plugin <= 1.0.7 is vulnerable to Backdoor

Software CommandBar for WP Admin Type Plugin Vulnerable versions = 1.0.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4ca3d0fa43b1 Credits Sansec.io Required privilege Unauthenticated Published 3...

WordPress ADDRESSYA Plugin <= 3.1.1 is vulnerable to Backdoor

Software ADDRESSYA Type Plugin Vulnerable versions = 3.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID fbc4dd8dabc1 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Social Warfare Plugin <= 4.4.7.1 is vulnerable to Backdoor

Software Social Warfare Type Plugin Vulnerable versions = 4.4.7.1 Fixed in 4.4.7.3 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 63a044ca178e Credits Sansec.io Required privilege Unauthenticated Published 3 July,...

WordPress BLAZE Retail Widget Plugin <= 2.5.2 is vulnerable to Backdoor

Software BLAZE Retail Widget Type Plugin Vulnerable versions = 2.5.2 Fixed in 2.5.4 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID a9f87b35d94a Credits Sansec.io Required privilege Unauthenticated Published 3 July...

WordPress FireBox Plugin <= 2.1.15 is vulnerable to Backdoor

Software FireBox Type Plugin Vulnerable versions = 2.1.15 Fixed in 2.1.16 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8a543ab1ba05 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Alfred Easy Shipping Plugin <= 1.0.5 is vulnerable to Backdoor

Software Alfred Easy Shipping Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c071f3d22627 Credits Sansec.io Required privilege Unauthenticated Published 3 July,...