1583 matches found
Malicious code in the-idea-of-you-by-robinne-lee-on-audiobook-full-volumes- (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d91700b0da8e1a53e1564ef80ca21fc0058d6bb18cfea0245dbd1bcf42c6062f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in the-starch-solution-eat-the-foods-you-love-regain-your-health-and-lose-the-weight-for-good-by-john-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2347832fd4241c7096849fc30f8047685ccc585a041e79482bc660e00b0fc0c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dow-load-twisted-palace-the-royals-3-by-erin-watt-on-kindle-full-edition- (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0992916e30ffe316f71ab67ab891183b2e852e6e9a04300baf44278b106f7b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-32076: External Control of System or Configuration Setting
in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...
Malicious code in mapi-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c898d0a405d3dbdd1d8f7534d31152e30eb107a587e3b71d6ebb46116d22746 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Xxe
External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2554 External Control of File Name or Path in unilogies/bumsys
External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2554 External Control of File Name or Path in unilogies/bumsys
External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...
PT-2023-20148 · Bumsys · Bumsys
Name of the Vulnerable Software and Affected Versions: bumsys versions prior to 2.2.0 Description: The issue concerns external control of file name or path in the GitHub repository unilogies/bumsys. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issu...
CVE-2023-2554
CVE-2023-2554 affects unilogies/bumsys prior to 2.2.0. The issue is External Control of File Name or Path, enabling path traversal via user-supplied input used to build file paths in easyUpload, potentially allowing arbitrary file write. Public sources (NVD/Red Hat/Rust) rate severity as HIGH (CV...
CVE-2023-2554: External Control of File Name or Path
External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2554
External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...
GHSA-22GJ-8QJ2-FJ46 Moodle External Control of File Name or Path vulnerability
The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system...
Moodle External Control of File Name or Path vulnerability
The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system...
Malicious code in zach-remade (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e27245be58fc94ee9cb1f874ee0312902cdac4fd9d444c865442922683fe9aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sa-club-documentation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ec22686cd96cc265b760943a47162bbd00a00c3ca60478a5388cd11b84fcbff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in clientcore-base-serviceclients (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fad1ea7ce0422c034f0a94e34659383bef565546e8580fbabe70b9530a317d83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-1105
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...