Malicious code in nayan-video-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf10956f5d92f293e642f4accf8ee89eacba6a060b7c9d89e35a1e9247c38b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11809 Malicious code in nayan-video-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf10956f5d92f293e642f4accf8ee89eacba6a060b7c9d89e35a1e9247c38b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Media Downloader plugin <= 0.4.7.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Media Downloader versions = 0.4.7.4...

CVE-2024-49763

PlexRipper is a cross-platform media downloader for Plex. PlexRipper’s open CORS policy allows attackers to gain sensitive information from PlexRipper by getting the user to access the attacker’s domain. This allows an attacking website to access the /api/PlexAccount endpoint and steal the user’s...

SmokeLoader Malware Resurfaces, Targeting Manufacturing and IT in Taiwan

Taiwanese entities in manufacturing, healthcare, and information technology sectors have become the target of a new campaign distributing the SmokeLoader malware. "SmokeLoader is well-known for its versatility and advanced evasion techniques, and its modular design allows it to perform a wide ran...

Malicious code in nayan-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d78c8b3e9347a4ddcba4d928f5d01d24ebac726db9320a6a451f503ed8ccb39f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11146 Malicious code in nayan-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d78c8b3e9347a4ddcba4d928f5d01d24ebac726db9320a6a451f503ed8ccb39f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10941 Malicious code in rana-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1bae57a99608bfda37ef9693c4945c31163d00df2027fe8558eac88c3320ecb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rana-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1bae57a99608bfda37ef9693c4945c31163d00df2027fe8558eac88c3320ecb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in imon-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3e79b6d6a40bed6caf15c5c2efc6da41d06f25fb082db4b3d3964112a091874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10934 Malicious code in imon-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3e79b6d6a40bed6caf15c5c2efc6da41d06f25fb082db4b3d3964112a091874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in delta-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d26055bd3522d0ee0e99be091c1c9091ebc165f47a807c39261ddbac77ad67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10922 Malicious code in delta-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d26055bd3522d0ee0e99be091c1c9091ebc165f47a807c39261ddbac77ad67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alif-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09c054a9fdb7c2b20ed0b7838086b67063d75062d681e05edfeb1c377ea19a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10915 Malicious code in alif-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09c054a9fdb7c2b20ed0b7838086b67063d75062d681e05edfeb1c377ea19a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-16562 · WordPress · Mp3 Sticky Player

Name of the Vulnerable Software and Affected Versions: MP3 Sticky Player plugin for WordPress versions up to, and including, 8.0 Description: The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal via the content/downloader.php file. This makes it possible for...

CVE-2024-51875

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nazmul Ahsan MDC YouTube Downloader allows DOM-Based XSS.This issue affects MDC YouTube Downloader: from n/a through 3.0.0...

CVE-2024-51875

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nazmul Ahsan MDC YouTube Downloader mdc-youtube-downloader allows DOM-Based XSS.This issue affects MDC YouTube Downloader: from n/a through = 3.0.0...

CVE-2024-51654

Cross-Site Request Forgery CSRF vulnerability in Eric Allen APK Downloader apk-downloader allows Stored XSS.This issue affects APK Downloader: from n/a through = 1.0.0...

CVE-2024-51654 WordPress APK Downloader plugin <= 1.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Eric Allen APK Downloader apk-downloader allows Stored XSS.This issue affects APK Downloader: from n/a through = 1.0.0...