46 matches found
Malicious code in cloudinary-sample-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49694f2b1b48b5a28ba485c7808e655d8e6d97d0414106b4d99363edd6c3257a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in angular-cloudinary-photo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b59796ba271976005dde455be31a416442de0369ccdf3a101759a3ccdcaea1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1937 Malicious code in cloudinary-sample-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49694f2b1b48b5a28ba485c7808e655d8e6d97d0414106b4d99363edd6c3257a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview dragonflycloudinary-datastore is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid usi...
Reverb.com: Basic auth details is still work on report ( 351555 )
Hi , Seem report 351555 is not full fixed where 434762629765715:PQlkrSHPqqjhIBc0MmUkdjcqpps basic auth details are Still work on login Poc : https://api.cloudinary.com/v11/reverb/usage F309894 Impact information Disclose...
Reverb.com: Disclosure of all uploads to Cloudinary via hardcoded api secret in Android app
Hi, in file com/reverb/app/CloudinaryFacade.java you have hardcoded the following config: java private static final java.lang.String CONFIG = "cloudinary://434762629765715:█████@reverb"; where 434762629765715:████████ is basic auth details. It shouldn't be disclosed to third parties as official...