4476 matches found
Malicious code in nethereum-helper-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1113e69bfa84d519a1db8e7d38e9f66170f41d55f60398de2f057c298838d76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in nethereum-helper-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-4690 Malicious code in nethereum-helper-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1113e69bfa84d519a1db8e7d38e9f66170f41d55f60398de2f057c298838d76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in canvas-helper-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10a55b1c2c0c95b2f39df71c4e6d9dc7b34f680ad6ed6c14449d6bfdb3dfb207 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4641 Malicious code in canvas-helper-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10a55b1c2c0c95b2f39df71c4e6d9dc7b34f680ad6ed6c14449d6bfdb3dfb207 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in canvas-helper-kit
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Robust and Verifiable MPC with Applications to Linear Machine Learning Inference
In this work, we present an efficient secure multi-party computation MPC protocol that provides strong security guarantees in settings with dishonest majority of participants who may behave arbitrarily. Unlike the popular MPC implementation known as SPDZ Crypto '12, which only ensures security wi...
Malicious code in rand-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6436f09942f4f079368c746cf4533b29a25e588f206b9fe93a3162cc2af031fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4496 Malicious code in rand-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6436f09942f4f079368c746cf4533b29a25e588f206b9fe93a3162cc2af031fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in rand-helper
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
PT-2025-27716
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue occurs when the sound/soc/codecs/hdmi-codec.c calls the plugged cb with NULL as the callback function and codec dev...
CVE-2024-8656
The WPFactory Helper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.7.0. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...
CVE-2024-31423
Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.5...
CVE-2024-9065
The WP Helper Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'whpsmtpsendmailtest' function in all versions up to, and including, 4.6.1. This makes it possible for unauthenticated attackers to send emails containing any...
CVE-2024-11093
The SG Helper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in version 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web...
CVE-2024-37926
Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.9...
CVE-2023-21257
In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2023-36689
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPFactory WPFactory Helper plugin = 1.5.2 versions...