MAL-2025-433 Malicious code in dropbox-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c1844c19c7cf3e5c4516bafe7182ca717bf32d84b8739bbfc011893f4a2e8ce The OpenSSF Package Analysis project identified 'dropbox-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c1844c19c7cf3e5c4516bafe7182ca717bf32d84b8739bbfc011893f4a2e8ce The OpenSSF Package Analysis project identified 'dropbox-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 17a4446bf449348fa824663891e88151cde9c81a2ad28680a022caa5fb0711ad The OpenSSF Package Analysis project identified 'dropbox-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-429 Malicious code in dropbox-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 17a4446bf449348fa824663891e88151cde9c81a2ad28680a022caa5fb0711ad The OpenSSF Package Analysis project identified 'dropbox-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-432 Malicious code in dropbox-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d735b3889e77f86aa8d52f42e0f73bef75404c1f768f42f215c512b8476ad514 The OpenSSF Package Analysis project identified 'dropbox-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d735b3889e77f86aa8d52f42e0f73bef75404c1f768f42f215c512b8476ad514 The OpenSSF Package Analysis project identified 'dropbox-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14813fcc0aa3e31ac37a8fe31ff8f6d050bebc01d1fcc73ffdd6507d209344a0 The OpenSSF Package Analysis project identified 'dropbox-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-434 Malicious code in dropbox-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14813fcc0aa3e31ac37a8fe31ff8f6d050bebc01d1fcc73ffdd6507d209344a0 The OpenSSF Package Analysis project identified 'dropbox-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ecb4588479d4814adaeee8f5670d6fcdb9fa38e06a48ed99dd6ace3553a4ac24 The OpenSSF Package Analysis project identified 'dropbox-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-430 Malicious code in dropbox-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ecb4588479d4814adaeee8f5670d6fcdb9fa38e06a48ed99dd6ace3553a4ac24 The OpenSSF Package Analysis project identified 'dropbox-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

CVE-2024-52270

User Interface UI Misrepresentation of Critical Information vulnerability in DropBox SignHelloSign allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only...

CVE-2024-52270

A User Interface (UI) Misrepresentation of Critical Information vulnerability in DropBox Sign (HelloSign) allows for Content Spoofing . The issue occurs because the displayed version of a document does not show the flattened version of layers; when a user prints the document (e.g., via Google Chr...

CVE-2024-52270 PDF Document Spoofing in DropBox Sign(HelloSign)

User Interface UI Misrepresentation of Critical Information vulnerability in DropBox SignHelloSign allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only...

DropBox Sign security vulnerability

DropBox Sign DropBox HelloSign is a DropBox company that sends, receives and manages legally binding electronic signatures. A security vulnerability exists in DropBox Sign versions 2024-12-04 and earlier that stems from a misrepresentation of a user interface critical information vulnerability th...

CVE-2024-52270: User Interface (UI) Misrepresentation of Critical Information

User Interface UI Misrepresentation of Critical Information vulnerability in DropBox SignHelloSign allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only...

PT-2024-35141 · Dropbox · Dropbox Sign

Name of the Vulnerable Software and Affected Versions: DropBox SignHelloSign versions through 2024-12-04 Description: The issue is related to a User Interface UI Misrepresentation of Critical Information vulnerability, allowing Content Spoofing. The displayed version does not show the layer...

CVE-2024-49607

Unrestricted Upload of File with Dangerous Type vulnerability in Redwan Hilali WP Dropbox Dropins allows Upload a Web Shell to a Web Server.This issue affects WP Dropbox Dropins: from n/a through 1.0...

CVE-2024-49607

Unrestricted Upload of File with Dangerous Type vulnerability in redhopit WP Dropbox Dropins wp-dropbox-dropins allows Upload a Web Shell to a Web Server.This issue affects WP Dropbox Dropins: from n/a through = 1.0...

CVE-2024-49607 WordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in redhopit WP Dropbox Dropins wp-dropbox-dropins allows Upload a Web Shell to a Web Server.This issue affects WP Dropbox Dropins: from n/a through = 1.0...

CVE-2024-49607 WordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in redhopit WP Dropbox Dropins wp-dropbox-dropins allows Upload a Web Shell to a Web Server.This issue affects WP Dropbox Dropins: from n/a through = 1.0...