Malicious Package

Overview @otto-ec/global-debug is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

CVE-2017-20090

A vulnerability was found in Global Content Blocks Plugin 2.1.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely...

Cross site request forgery (csrf)

A vulnerability was found in Global Content Blocks Plugin 2.1.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely...

CVE-2017-20090 Global Content Blocks Plugin cross-site request forgery

A vulnerability was found in Global Content Blocks Plugin 2.1.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely...

CVE-2017-20090

The CVE-2017-20090 entry concerns the WordPress plugin Global Content Blocks Plugin version 2.1.5. The vulnerability is described as enabling cross-site request forgery, with the manipulation affecting unknown code and the attack executable remotely. The connected documents corroborate a CSRF iss...

CVE-2017-20090 Global Content Blocks Plugin cross-site request forgery

A vulnerability was found in Global Content Blocks Plugin 2.1.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely...

Trend Micro CEO Discusses Need for a Unified Cybersecurity Platform

In the face of evolving cyberattacks, an ever-expanding digital attack surface, and a global skills shortage, organizations need a more unified approach to managing cyber risk. Trend Micro co-founder & CEO Eva Chen discusses our vision and strategy for delivering a unified cybersecurity platform...

WordPress Plugin Global Content Blocks 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2022-34213

Jenkins Squash TM Publisher Squash4Jenkins Plugin 1.0.0 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

CVE-2022-34202

Jenkins EasyQA Plugin 1.0 and earlier stores user passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

Security Bulletin: IBM Sterling Global Mailbox is vulnerable to remote code execution due to Apache Log4j (CVE-2021-4104)

Summary Apache Log4j is used by IBM Sterling Global Mailbox as part of its logging infrastructure. This fix includes Apache Log4j v2.17.1. Vulnerability Details CVEID: CVE-2021-4104 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system, caused by the...

PT-2022-22084 · Jenkins · Jenkins Squash Tm Publisher Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Squash TM Publisher Squash4Jenkins Plugin versions 1.0.0 and earlier Description: The issue allows passwords to be stored unencrypted in the global configuration file on the Jenkins controller, making them accessible to users with...

Jenkins Plugin Squash TM Publisher 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins Squash TM Publisher Plugin 1.0.0...

Malicious code in ae-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3fa04a259a35253dd065c75cb9e80dad393242e39fa212d6941960ba2e19f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-878 Malicious code in ae-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3fa04a259a35253dd065c75cb9e80dad393242e39fa212d6941960ba2e19f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in target-global-mbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c454857fbb475e3cdc8810d6ff28bf9d3b69a804386050c090292fa056fc5035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6419 Malicious code in target-global-mbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c454857fbb475e3cdc8810d6ff28bf9d3b69a804386050c090292fa056fc5035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in global-order-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b45c8559de1a9a448235e712738bfef842eb940a36b63ee86dede4e988ad4ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3390 Malicious code in global-order-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b45c8559de1a9a448235e712738bfef842eb940a36b63ee86dede4e988ad4ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bsd-global-nav-design-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8363937f49377a77760b70632c87c41f4786925e36ba7d072aca7dcae2639da5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...