MAL-2024-2779 Malicious code in oauth-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49c48193ba50bb4ead1e212925eab8873e7e4ad7fa834d41e7626bb4e5036f3 package.json declares a preinstall: node index.js hook that fires automatically on npm install. index.js collects installer-side data — os.hostname,...

Malicious code in oauth-connect-popup (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oauth-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49c48193ba50bb4ead1e212925eab8873e7e4ad7fa834d41e7626bb4e5036f3 package.json declares a preinstall: node index.js hook that fires automatically on npm install. index.js collects installer-side data — os.hostname,...

MAL-2024-2780 Malicious code in oauth-connect-popup (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-37228

Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through = 0.1.0.38...

CVE-2024-37228

Improper Control of Generation of Code 'Code Injection' vulnerability in InstaWP Team InstaWP Connect allows Code Injection.This issue affects InstaWP Connect: from n/a through 0.1.0.38...

CVE-2024-37228 WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through = 0.1.0.38...

CVE-2024-37228

CVE-2024-37228 concerns InstaWP Connect (InstaWP Team) with an unauthenticated Arbitrary File Upload vulnerability. Public details indicate the flaw affects InstaWP Connect versions up to 0.1.0.38, enabling code/file upload without authentication due to improper handling during upload workflows. ...

CVE-2024-37228 WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in InstaWP Team InstaWP Connect allows Code Injection.This issue affects InstaWP Connect: from n/a through 0.1.0.38...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2024-647)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-647 advisory. 2024-07-17: CVE-2024-30255 was added to this advisory. Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling vulnerability exists through Envoy if a serve...

WordPress plugin InstaWP Connect code injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

PT-2024-27397 · Unknown · Instawp Connect

Name of the Vulnerable Software and Affected Versions: InstaWP Connect versions 0.1.0.38 and earlier Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability, which allows Code Injection. Recommendations: For InstaWP Connect versions 0.1.0.38 a...

Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2024-037)

The version of ecs-service-connect-agent installed on the remote host is prior to v1.29.5.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2024-037 advisory. Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling...

VulnCheck KEV: CVE-2024-36680

In the module Facebook pkfacebook =1.0.1 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The ajax script facebookConnect.php have a sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection...

CVE-2024-35537

TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption...

CVE-2024-35537

TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption...

WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by AtaTurk1925 Patchstack Alliance in WordPress Plugin InstaWP Connect versions = 0.1.0.38...

SUSE CVE-2024-38584

In the Linux kernel, the following vulnerability has been resolved: net: ti: icssgprueth: Fix NULL pointer dereference in pruethprobe In the pruethprobe function, if one of the calls to emacphyconnect fails due to ofphyconnect returning NULL, then the subsequent call to phyattachedinfo will...

CVE-2024-35537

TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption...

CVE-2024-35537

CVE-2024-35537 affects TVS Motor Company Limited TVS Connect on Android v4.6.0 and iOS v5.0.0. The root cause is insecure handling of the RSA key pair, which could allow an attacker to decrypt and access sensitive information. Publicly available documents consistently describe the issue as improp...