5267 matches found
CVE-2024-40560
Tmalldemo before v2024.07.03 was discovered to contain a SQL injection vulnerability...
CVE-2024-40554
An access control issue in Tmalldemo v2024.07.03 allows attackers to obtain sensitive information...
Malicious code in transitive-vulnerability-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b6b18dfb31ebb3155a17b612cec91c947ae2da8b9be46c3e172b779fa40e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7758 Malicious code in transitive-vulnerability-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b6b18dfb31ebb3155a17b612cec91c947ae2da8b9be46c3e172b779fa40e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-28919 · Unknown · Tmall Demo
Name of the Vulnerable Software and Affected Versions: Tmall demo version 2024.07.03 Description: The issue is related to an access control problem, which enables attackers to gain access to sensitive information. Recommendations: For Tmall demo version 2024.07.03, at the moment, there is no...
PT-2024-28920 · Unknown · Tmall Demo
Name of the Vulnerable Software and Affected Versions: Tmall demo version 2024.07.03 Description: The issue allows for an arbitrary file upload, which could potentially lead to unauthorized access or malicious activity. Recommendations: For version 2024.07.03, at the moment, there is no informati...
PT-2024-28918 · Unknown · Tmall Demo
Name of the Vulnerable Software and Affected Versions: Tmall demo version 2024.07.03 Description: The issue allows for an arbitrary file upload through the uploadUserHeadImage component. Recommendations: For Tmall demo version 2024.07.03, consider disabling the uploadUserHeadImage component until...
WordPress Olive One Click Demo Import plugin <= 1.1.2 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin Olive One Click Demo Import versions = 1.1.2...
WordPress Olive One Click Demo Import Plugin <= 1.1.2 is vulnerable to Sensitive Data Exposure
Software Olive One Click Demo Import Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-38749 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 3944618737f2 Credits Peng Zhou Require...
Malicious code in demo-51200 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c93692ca1e6a2de0d48dbba668f2ba80baf930a19fe3b9273195f6528e77d406 The OpenSSF Package Analysis project identified 'demo-51200' @ 1.0.0 npm as malicious. It is considered malicious because: - The package execute...
Exploit for Out-of-bounds Write in Mozilla Firefox
CVE-2024-29943 A Pwn2Own SpiderMonkey JIT Bug: From Integer R...
Malicious code in chef_handler-datadog-demo (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in demo-malicious-package (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3943 Malicious code in web3-unleashed-demo (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in web3-unleashed-demo (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in malicious-pkg-demo (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2584 Malicious code in kol-demo (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in kol-demo (npm)
--- -= Per source details. Do not edit below this line.=-...