64 matches found
Malicious code in asdasd-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11304 Malicious code in asdasd-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tautoak4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0a170170a102f43fd03d3b08bbcb53a572a5f48cde13250b3059ff3b332404a The OpenSSF Package Analysis project identified 'tautoak4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...
MAL-2024-10818 Malicious code in tautoak4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0a170170a102f43fd03d3b08bbcb53a572a5f48cde13250b3059ff3b332404a The OpenSSF Package Analysis project identified 'tautoak4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...
MAL-2024-10819 Malicious code in tautoake4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5bbdacc63f269510ff88a76b84cae8deaa666d09fa9f9272c1463acfdff86e5 The OpenSSF Package Analysis project identified 'tautoake4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in tautoake4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5bbdacc63f269510ff88a76b84cae8deaa666d09fa9f9272c1463acfdff86e5 The OpenSSF Package Analysis project identified 'tautoake4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in take2-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3caf0d2c986a7f85b5b656b1597d921f3642dca37fd0d5516208e69befb5cf53 The OpenSSF Package Analysis project identified 'take2-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in take3-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3ab74f2bd476e91c4d2e0d1cd29fa80dfb82df59eb0d48c4fd32e6fec28ef39 The OpenSSF Package Analysis project identified 'take3-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Exploit for Path Traversal in Kau-Boys Hello_World
CVE-2024-9224 Hello World = 2.1.1 - Authenticated Subscri...
CVE-2024-9224
The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...
CVE-2024-9224 Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read
The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...
WordPress Hello World plugin <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read vulnerability
Authenticated Subscriber+ Arbitrary File Read vulnerability discovered by yudha in WordPress Plugin Hello World versions = 2.1.1...
WordPress Hello World Plugin <= 2.1.1 is vulnerable to Arbitrary File Download
Software Hello World Type Plugin Vulnerable versions = 2.1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2024-9224 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 936cc3342bfb Credits yudha Required privilege...
PT-2024-39503 · WordPress · Hello World
Name of the Vulnerable Software and Affected Versions: Hello World plugin for WordPress versions up to, and including, 2.1.1 Description: The issue allows authenticated attackers with subscriber-level access and above to read the contents of arbitrary files on the server, which can contain...
WordPress plugin Hello World 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
MAL-2024-10034 Malicious code in hello-world-package-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8ee148c559a9993ef0660c9183434ff59d2f6430a126a5913ef9a8341b9014ff Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...
Malicious code in hello-world-package-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8ee148c559a9993ef0660c9183434ff59d2f6430a126a5913ef9a8341b9014ff Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...
Exploit for CVE-2021-46703
CVE-2021-46703 Simple payload builder based on POC in: https:/...
Malicious code in bfs-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08afca1626800ca0dd2df0ebca0d8eee030193fa1ca08a8d21115db0d5bcbc6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
