Malicious code in shahwar-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6abdcb9a6823d76add820a3edb006ffd7c40f0fc58ead49051858dece631f3bd The OpenSSF Package Analysis project identified 'shahwar-demo' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-12073 Malicious code in shahwar-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6abdcb9a6823d76add820a3edb006ffd7c40f0fc58ead49051858dece631f3bd The OpenSSF Package Analysis project identified 'shahwar-demo' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in shoaib-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb95e309abd17903fc4f82a78f56fa78a8e2e46cfa345d7356ed4a19c38c74f7 The OpenSSF Package Analysis project identified 'shoaib-demo' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11880 Malicious code in shoaib-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb95e309abd17903fc4f82a78f56fa78a8e2e46cfa345d7356ed4a19c38c74f7 The OpenSSF Package Analysis project identified 'shoaib-demo' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-9698

The Crafthemes Demo Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'processuploadedfiles' function in all versions up to, and including, 3.3. This makes it possible for authenticated attackers, with Administrator-level access and...

CVE-2024-9698 Crafthemes Demo Import <= 3.3 - Authenticated (Admin+) Arbitrary File Upload in process_uploaded_files

The Crafthemes Demo Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'processuploadedfiles' function in all versions up to, and including, 3.3. This makes it possible for authenticated attackers, with Administrator-level access and...

CVE-2024-9698

CVE-2024-9698 affects Crafthemes Demo Import plugin for WordPress. The vulnerability is an authenticated Arbitrary File Upload in process_uploaded_files (versions ≤ 3.3) caused by missing file-type validation, with potential for remote code execution on the affected site. A public exploit for thi...

WordPress plugin Crafthemes Demo Import 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A code issue vulnerability exists in WordPress plugin...

Malicious code in demo-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73030295cfc2df37061e6ab74ae2c0b2cea34184879e24b484012a578a9ed576 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11165 Malicious code in demo-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73030295cfc2df37061e6ab74ae2c0b2cea34184879e24b484012a578a9ed576 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rnt-demo-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5cbbd919711d5470c4eb7a7d5cfd11afa42fb66153dd49e08acc164e467d1da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11080 Malicious code in rnt-demo-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5cbbd919711d5470c4eb7a7d5cfd11afa42fb66153dd49e08acc164e467d1da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10532

CVE-2024-10532 affects Bard Extra for WordPress. The vulnerability is due to a missing authorization check in the bardxtra_import_xml() function, allowing authenticated users with subscriber-level access and above to import demo data, enabling unauthorized modification of data. Affected versions ...

WordPress Bard Extra plugin <= 1.2.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import vulnerability

Missing Authorization to Authenticated Subscriber+ Demo Import vulnerability discovered by Lucio Sá in WordPress Plugin Bard Extra versions = 1.2.7...

Exploit for CVE-2024-42640

CVE-2024-42640 Unauthenticated Remote Code Execution via Angul...

CVE-2024-51751 Arbitrary file read with File and UploadButton components in Gradio

Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadButton components are used as a part of Gradio application to preview file content, an attacker with access to the application might abuse these components to read arbitrary file...

CVE-2024-37207

Missing Authorization vulnerability in Theme4Press Demo Awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Demo Awesome: from n/a through 1.0.2...

CVE-2024-37207 WordPress Demo Awesome plugin <= 1.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Theme4Press Demo Awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Demo Awesome: from n/a through 1.0.2...

CVE-2024-37207 WordPress Demo Awesome plugin <= 1.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Theme4Press Demo Awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Demo Awesome: from n/a through 1.0.2...

CVE-2024-37207

CVE-2024-37207 affects Theme4Press Demo Awesome (WordPress plugin) up to version 1.0.2. Described as a Missing Authorization / Broken Access Control vulnerability due to incorrectly configured access levels, enabling unauthorized access to restricted functionality. Affected range: n/a through 1.0...