Malicious code in design-system-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf54fc5bdd0f75d047cec19cff91ad519eae2b7cd33b0471f1b527505df2668e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @ncr-design-system/cxd-npm-group

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @ncr-design-system/cxd-npm-releases

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-450 Malicious code in @ncr-design-system/cxd-npm-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1057092de4a4a513e2dfc25179d2f023f8dab1939839baea98b5d1e547dffd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-451 Malicious code in @ncr-design-system/cxd-npm-releases (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006d2f71b3519c6fc98d63cb3fe8db7b056395cb490db6a35bd2b75de7da5d12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7328 Malicious code in yarn-design-system-logos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9006849a713475d0be0ef3619338ecd191969c2f0a3d9d8d310cd68e292e75a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yarn-design-system-logos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9006849a713475d0be0ef3619338ecd191969c2f0a3d9d8d310cd68e292e75a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in yarn-design-system-logos

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-4669 Malicious code in mollie-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e4acdc4d5f723ad8ee6225520718f124eeb148131903261e445699cbd664d21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mollie-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e4acdc4d5f723ad8ee6225520718f124eeb148131903261e445699cbd664d21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in mollie-design-system

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

GOV.UK Theme - Moderately critical - Cross site scripting - SA-CONTRIB-2022-027

The GOV.UK Theme govuktheme is a Drupal theme for the GOV.UK Design System. The theme doesn't sanitize user input in certain cases, which leads to Cross-Site-Scripting XSS vulnerabilities. An attacker that can create or edit certain entities or configuration may be able to exploit one or more...

SQL Injection Vulnerability in Taiwan Billionaire Web Design Company's Website Building System

Taiwan Billion Web Design is a web design company. A SQL injection vulnerability exists in the web design system of Taiwan Billion Web Design Company, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Web Design System of Weili Taiwan Ltd.

Taiwan Weili Web Design Co., Ltd. is a customized web site based on customer needs, mainly promoting the suite of web design services, customers include food, electronics, computers, machinery and service industries, etc.. A SQL injection vulnerability exists in the website building system of Wei...

IBM Curam Social Program Management HTML Injection Vulnerability

IBM Cúram Social Program Management SPM is a suite of social program management solutions from IBM in the United States. The solution supports the end-to-end social program delivery process.Social Program Management Design System is one of the Social Program Management Design System components. A...

File Uploading Vulnerability in Nanjing Centaur Graduation Design System

Nanjing Xianji Graduation Design System is a set of management system that runs through the whole process of school graduation design thesis. A file upload vulnerability exists in Nanjing Centaur Graduation Design System, which can be exploited by attackers to upload arbitrary files...

SiteBuilder-FX top.php admindir Parameter Remote File Inclusion

The remote host is running SiteBuilder-FX, a web-based design system written in PHP. The version of SiteBuilder-FX installed on the remote host fails to sanitize input to the 'admindir' parameter of the 'admin/top.php' script before using it to include PHP code. Regardless of the setting of PHP's...