Magento / Adobe Commerce Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CosmicSting: Magento Arbitrary File Read CVE-2024-34102 + PHP Buffer Overflow in the iconv function of glibc CVE-2024-2961', 'Description' = %q...

Dell AppSync Server XML External Entity Injection Vulnerability

Dell AppSync Server is a copy data management software from Dell USA. An XML external entity injection vulnerability exists in Dell AppSync Server versions 4.3 through 4.6, which arises from a networked system or product that does not have the correct filters in place to allow references to...

IBM WebSphere Application Server XML External Entity Injection Vulnerability (CNVD-2024-43189)

IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. An XML external entity injection vulnerability exists in...

MAL-2024-9316 Malicious code in 844b5t (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c94eb1a3b22cc1d70762d22b1b4267f152ebd42f59622a80427938d470e946ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9315 Malicious code in 7qt8hl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbd79d7a9dbbe62f3ddb18022c026a13ce104cd8164073cf50519b6ee8f2922b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9314 Malicious code in 7phpfm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9995a61732fac32b87d87296bb2f8b533c0eff6b2736b0bc641bee8e79f2a43f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gvjtly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca5bed858b30f81e55f21887add0cd3d3d1820054f304dbb5ee451b6b429031b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9309 Malicious code in 4i0g5z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5390faef7b52768e7f8ed29f34450931d8cbeaa66f1dd41be9db13a71ff9b9da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9374 Malicious code in kald0a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74b0a25465a0ec47537a56aa181edb7f3959f7a20b971d8d6d388f89783cc590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9393 Malicious code in ssp5z6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e61846c2bf8da47f6af8717ec27c39e7685f28065bc4daac90813d03f41dc6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9308 Malicious code in 2pozw6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd4b12d769ed0f88b60174d6434217946799552e6e5588cec3eeeee0017a586f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9395 Malicious code in w3jp6x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d73fff393799245c490e4d428b124f043cffc6ee705362ab6c903d2a09e9c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9341 Malicious code in avail-able-albu-m-down-load-15496-morning-view-pbn51-tjmcxv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a44acac841eaeacfa072df02665786202f3c5233f826cfc1e37e80b0c157395 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9326 Malicious code in agl9v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78e20d511a34d24103b62f848d649aa633dd8a711dfa83942fd04b045ee216aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-lo-ad-now-zip-mp3-18275-skelliconnection-taeie-mgpquk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 578abfb010f8a9f4c568a1b1c60ed36c604c73c95d630526fa210c8dfbc01253 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9343 Malicious code in avail-able-albu-m-down-load-37035-boom-chicka-boom-bk3mq-llyzsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b2797f58177b66d9be1500b40bd7b910b50660e07b0b4b73780746fcfcf57b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9332 Malicious code in alb-um-availa-ble-zip-mp3-file-a-river-aint-too-much-to-love-0u85h-vysnxq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c72c5982067efbd85c4990ae6b2d16cfa784a9beabd0f1b93fb7e6e8b02ac445 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9383 Malicious code in mp3-file-zip-d-ownload-7517-goodbye-yellow-brick-road-h63vl-tpdnhx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ce58c2ac7b1825c26b2656020f588d8a223c04953287197e776979cc4f4f6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9334 Malicious code in ava-ilable-down-load-mp3-today-2013-10071-pure-heroine-vldvc-oyqobe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7003af9446fd5fa2fc8b3568b91decb0000e827a9b881a8b8e0154f0d98e9d3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9347 Malicious code in do-wnload-available-2014-20032-happiness-is-happening-2iby6-rsrcqq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cda9a14c57a889f64527676ba7f78ef36002bf04a2e1a80afd91784c4fdc969b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...