1272 matches found
MAL-2024-307 Malicious code in wlwz-2312-1502 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b419fbe7b34074ccbdb7a8d3f4ba78e4cf2ce4ec98b0890a6c00bf046cf4287d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-263 Malicious code in wlwz-2312-1003 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8064ee2fcb9b3600964208a441c75e136578227a77276e909535fb286e0312d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2312-0508 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68c1f0d270d0e79a69cea601fa0149e15c0b0d04b1859596bbe9da551c353414 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2312-7702 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5087b60a2ac48b70b4534390da87ceb8b5517667a646d35a03ae0dfd163a3de4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2312-1402 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4446492a1d2315d695b4a7eb0d53f1b1998469f0abbe979a61d9414d16ca019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-179 Malicious code in wlwz-2312-0101 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f7b6bed315237c97461395e2e22df72ad01377b69477f65012584188e6d8aa6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-169 Malicious code in wlwz-2311-1406 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2868e2d7dfc07ef1f7278406cd0a0eefc416b16e4615b55a00cb936707bf443 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gothics-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c6e204942ce7d1d6fcab20b291046245afd203ef0700404ac39f8b907a2b7ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-112 Malicious code in djs-selfbot-v14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3afe9942efa3f5082e6e6393ab078295d7c051c7f113d3ff2ca4e44eb520d9ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-75 Malicious code in lwc-jest-serializer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c88fb0df21e3f633176d1aa6411b5fa4bb5175518fe00ea39ededf35bf8823de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in noblox.js-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 241387eedcc17cd69cbec9253b8a7e8449b25301def93cef2479e6f012619398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Improper Web Parameter Validation
httparty is the vulnerability of External Control of Assumed-Immutable Web Parameter. The vulnerability is caused due to The lack of escaping of the " Double-Quote character in Content-Disposition filename. This allows the attacker to modify the application data...
Malicious code in ether-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c0daa6287f78623d9fd9d2bd501403142d5196ad67ff5eb49c867d9dea7504a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in lockself (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 763cacc0b344181f12ca9b91d4dc48926ded58e96d01fdfdb14acf86dfaaca4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
External Control Of File Name Or Path
h2o is vulnerable to External Control of File Name or Path. The vulnerability exists due to improper input validation which allows an attacker to manipulate file paths to access or modify files outside of the intended directories...
GHSA-GQRQ-J6PM-98C2 External Control of File Name or Path in h2oai/h2o-3
Remote unauthenticated attackers can overwrite arbitrary server files with attacker-controllable data. The data that the attacker can control is not entirely arbitrary. h2o writes a CSV/XLS/etc file to disk, so the attacker data is wrapped in quotations and starts with "C1", if they're exporting ...
External Control of File Name or Path in h2oai/h2o-3
Remote unauthenticated attackers can overwrite arbitrary server files with attacker-controllable data. The data that the attacker can control is not entirely arbitrary. h2o writes a CSV/XLS/etc file to disk, so the attacker data is wrapped in quotations and starts with "C1", if they're exporting ...
CVE-2023-6569
External Control of File Name or Path in h2oai/h2o-3...
