Lucene search
+L

1737 matches found

Github Security Blog
Github Security Blog
•added 2024/12/13 3:25 a.m.•2 views

Malware in imran-downloader

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/12/13 3:25 a.m.•12 views

MAL-2024-11832 Malicious code in imran-downloader-servar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ed3c408311c79c6c881bf500f227a981d7cd2c0908cb00a0bd010e9d5352bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/12/13 3:25 a.m.•2 views

Malware in imran-downloader-servar

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/12/13 3:25 a.m.•11 views

MAL-2024-11831 Malicious code in imran-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15461cfacc497cef71b31228912fc6fdb11bee1b51f4f93604e7efa6337b63c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•19 views

PT-2024-36205 · Unknown · Ederson Peka Media Downloader

Name of the Vulnerable Software and Affected Versions: Ederson Peka Media Downloader versions 0.4.7.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker ca...

7.1CVSS6.7AI score0.00436EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•35 views

WordPress plugin Media Downloader 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS8AI score0.00436EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•5 views

CVE-2024-54322: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ederson Peka Media Downloader media-downloader allows Reflected XSS.This issue affects Media Downloader: from n/a through = 0.4.7.4...

7.1CVSS5.8AI score0.00436EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/12 5:28 a.m.•9 views

Malicious code in nayan-video-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf10956f5d92f293e642f4accf8ee89eacba6a060b7c9d89e35a1e9247c38b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/12/12 5:28 a.m.•2 views

Malware in nayan-video-downloader

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/12/12 5:28 a.m.•24 views

MAL-2024-11809 Malicious code in nayan-video-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf10956f5d92f293e642f4accf8ee89eacba6a060b7c9d89e35a1e9247c38b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/11 8:42 p.m.•17 views

WordPress Media Downloader plugin <= 0.4.7.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Media Downloader versions = 0.4.7.4...

7.1CVSS6.1AI score0.00436EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/12/02 5:15 p.m.•41 views

CVE-2024-49763

PlexRipper is a cross-platform media downloader for Plex. PlexRipper’s open CORS policy allows attackers to gain sensitive information from PlexRipper by getting the user to access the attacker’s domain. This allows an attacking website to access the /api/PlexAccount endpoint and steal the user’s...

8.7CVSS0.00524EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2024/12/02 2:01 p.m.•47 views

SmokeLoader Malware Resurfaces, Targeting Manufacturing and IT in Taiwan

Taiwanese entities in manufacturing, healthcare, and information technology sectors have become the target of a new campaign distributing the SmokeLoader malware. "SmokeLoader is well-known for its versatility and advanced evasion techniques, and its modular design allows it to perform a wide ran...

7.8CVSS7.6AI score0.99945EPSS
SaveExploits63
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/29 3:37 a.m.•6 views

Malicious code in nayan-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d78c8b3e9347a4ddcba4d928f5d01d24ebac726db9320a6a451f503ed8ccb39f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/29 3:37 a.m.•1 views

Malware in nayan-media-downloader

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/11/29 3:37 a.m.•9 views

MAL-2024-11146 Malicious code in nayan-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d78c8b3e9347a4ddcba4d928f5d01d24ebac726db9320a6a451f503ed8ccb39f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/25 1:34 a.m.•8 views

Malicious code in rana-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1bae57a99608bfda37ef9693c4945c31163d00df2027fe8558eac88c3320ecb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/25 1:34 a.m.•1 views

Malware in rana-media-downloader

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/11/25 1:34 a.m.•11 views

MAL-2024-10941 Malicious code in rana-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1bae57a99608bfda37ef9693c4945c31163d00df2027fe8558eac88c3320ecb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/25 1:32 a.m.•9 views

Malicious code in imon-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3e79b6d6a40bed6caf15c5c2efc6da41d06f25fb082db4b3d3964112a091874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder