Malicious code in branch-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce05613edf65a4a8af219c02f9ea8ec4563b9d66c2d4d824617dcc69d4bca211 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9134 Malicious code in branch-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce05613edf65a4a8af219c02f9ea8ec4563b9d66c2d4d824617dcc69d4bca211 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agoda-design-toolkit-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 108287c52cc6b7d73890c29bc9f478cb107ed2906c062820d73eb4d51795eb80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9123 Malicious code in agoda-design-toolkit-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 108287c52cc6b7d73890c29bc9f478cb107ed2906c062820d73eb4d51795eb80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How Wiz Meets CISA “Secure by Design” Objectives

An update on our commitments to customer security...

WordPress Limit Login Attempts Plugin <= 5.3 is vulnerable to Bypass Vulnerability

Software Limit Login Attempts Type Plugin Vulnerable versions = 5.3 Fixed in 5.4 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2022-4534 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 03e4ff962fd9 Credits rezaduty Required privilege Publishe...

Malicious Package

Overview agoda-design-toolkit-2 is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection betwee...

Malicious Package

Overview agoda-design-toolkit-2 is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection betwee...

Autodesk Navisworks 缓冲区错误漏洞

Autodesk Navisworks is a 3D model review software for architecture, engineering, and construction from Autodesk, Inc. A buffer error vulnerability exists in Autodesk Navisworks version 2025, which originates from a maliciously crafted DWFX file that can be forced to write out-of-bounds, and can b...

Autodesk Navisworks 缓冲区错误漏洞

Autodesk Navisworks is a 3D model review software for architecture, engineering and construction from Autodesk, Inc. in the United States. A buffer error vulnerability exists in Autodesk Navisworks version 2025, which stems from a maliciously crafted DWF file that could force a heap-based buffer...

Autodesk Navisworks 缓冲区错误漏洞

Autodesk Navisworks is 3D model review software for architecture, engineering, and construction from Autodesk, Inc. A buffer error vulnerability exists in Autodesk Navisworks version 2025, which stems from a maliciously crafted DWFX file that could trigger a heap-based buffer overflow, which coul...

Autodesk Navisworks 缓冲区错误漏洞

Autodesk Navisworks is 3D model review software for architecture, engineering, and construction from Autodesk, Inc. A buffer error vulnerability exists in Autodesk Navisworks version 2025, which stems from a maliciously crafted DWFX file that can be forced to read out-of-bounds and can be exploit...

Autodesk Navisworks 资源管理错误漏洞

Autodesk Navisworks is 3D model review software for architecture, engineering, and construction from Autodesk, Inc. Autodesk Navisworks version 2025 suffers from a Resource Management Error vulnerability that originates from a maliciously crafted DWF file that may force a post-release reuse...

CVE-2024-3373

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RSM Design Website Template allows SQL Injection. This issue affects Website Template: before 1.2...

CVE-2024-3373

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RSM Design Website Template allows SQL Injection. This issue affects Website Template: before 1.2...

CVE-2024-3373 SQLi in RSM Design's Website Template

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RSM Design Website Template allows SQL Injection. This issue affects Website Template: before 1.2...

CVE-2024-3373 SQLi in RSM Design's Website Template

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RSM Design Website Template allows SQL Injection. This issue affects Website Template: before 1.2...

CVE-2024-3373

CVE-2024-3373 affects RSM Design Website Template prior to version 1.2. The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands, leading to potential unauthorized data access or modification as described across multiple sources. Exploitation details are...

RSM Design Website Template SQL注入漏洞

RSM Design Website Template is a website template from RSM Design. A SQL injection vulnerability exists in RSM Design Website Template prior to version 1.2, which stems from the inclusion of a SQL injection vulnerability...

PT-2024-25459 · Unknown · Rsm Design Website Template

Name of the Vulnerable Software and Affected Versions: RSM Design Website Template versions prior to 1.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows attackers to execute malicious querie...