Malicious code in dropbox-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d735b3889e77f86aa8d52f42e0f73bef75404c1f768f42f215c512b8476ad514 The OpenSSF Package Analysis project identified 'dropbox-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-432 Malicious code in dropbox-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d735b3889e77f86aa8d52f42e0f73bef75404c1f768f42f215c512b8476ad514 The OpenSSF Package Analysis project identified 'dropbox-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14813fcc0aa3e31ac37a8fe31ff8f6d050bebc01d1fcc73ffdd6507d209344a0 The OpenSSF Package Analysis project identified 'dropbox-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-434 Malicious code in dropbox-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14813fcc0aa3e31ac37a8fe31ff8f6d050bebc01d1fcc73ffdd6507d209344a0 The OpenSSF Package Analysis project identified 'dropbox-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-430 Malicious code in dropbox-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ecb4588479d4814adaeee8f5670d6fcdb9fa38e06a48ed99dd6ace3553a4ac24 The OpenSSF Package Analysis project identified 'dropbox-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ecb4588479d4814adaeee8f5670d6fcdb9fa38e06a48ed99dd6ace3553a4ac24 The OpenSSF Package Analysis project identified 'dropbox-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

CVE-2024-52270

User Interface UI Misrepresentation of Critical Information vulnerability in DropBox SignHelloSign allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only...

CVE-2024-52270 PDF Document Spoofing in DropBox Sign(HelloSign)

User Interface UI Misrepresentation of Critical Information vulnerability in DropBox SignHelloSign allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only...

CVE-2024-52270

DropBox Sign (HelloSign) is affected by a UI misrepresentation vulnerability (Content Spoofing) affecting versions through 2024-12-04. The issue is observed when printing the UI; the layered content is not flattened in print previews, potentially enabling spoofed content disclosure. Concrete deta...

PT-2024-35141 · Dropbox · Dropbox Sign

Name of the Vulnerable Software and Affected Versions: DropBox SignHelloSign versions through 2024-12-04 Description: The issue is related to a User Interface UI Misrepresentation of Critical Information vulnerability, allowing Content Spoofing. The displayed version does not show the layer...

DropBox Sign 安全漏洞

DropBox Sign DropBox HelloSign is a DropBox company that sends, receives and manages legally binding electronic signatures. A security vulnerability exists in DropBox Sign versions 2024-12-04 and earlier that stems from a misrepresentation of a user interface critical information vulnerability th...

CVE-2024-49607

Unrestricted Upload of File with Dangerous Type vulnerability in Redwan Hilali WP Dropbox Dropins allows Upload a Web Shell to a Web Server.This issue affects WP Dropbox Dropins: from n/a through 1.0...

CVE-2024-49607

Unrestricted Upload of File with Dangerous Type vulnerability in redhopit WP Dropbox Dropins wp-dropbox-dropins allows Upload a Web Shell to a Web Server.This issue affects WP Dropbox Dropins: from n/a through = 1.0...

CVE-2024-49607 WordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in redhopit WP Dropbox Dropins wp-dropbox-dropins allows Upload a Web Shell to a Web Server.This issue affects WP Dropbox Dropins: from n/a through = 1.0...

CVE-2024-49607 WordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in redhopit WP Dropbox Dropins wp-dropbox-dropins allows Upload a Web Shell to a Web Server.This issue affects WP Dropbox Dropins: from n/a through = 1.0...

WordPress plugin WP Dropbox Dropins 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2024-33562 · Redwan Hilali · Wp Dropbox Dropins

Name of the Vulnerable Software and Affected Versions: Redwan Hilali WP Dropbox Dropins versions 1.0 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can potentially compromise web servers...

WordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin WP Dropbox Dropins versions = 1.0...

WordPress WP Dropbox Dropins Plugin <= 1.0 is vulnerable to Arbitrary File Upload

Software WP Dropbox Dropins Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49607 Patch priority High CVSS severity High 10 Developer Claim ownership PSID bc49371a8bf9 Credits stealthcopter Required privilege...

Microsoft Detects Growing Use of File Hosting Services in Business Email Compromise Attacks

Microsoft is warning of cyber attack campaigns that abuse legitimate file hosting services such as SharePoint, OneDrive, and Dropbox that are widely used in enterprise environments as a defense evasion tactic. The end goal of the campaigns are broad and varied, allowing threat actors to compromis...