MAL-2022-4026 Malicious code in jetpack-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 451146994cb4bf9d5689449d918ee2bd2a4ad7e567cdbdd8edf5dfb934fb5060 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4024 Malicious code in jetpack-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e92f1176873065bfe6b74dbc035066bb56528c5184667f6453b14ee7237f76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4022 Malicious code in jetpack-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78131054c2836cc0ee662da40c31bc3e2cb4c0d6fdc0fe716055acd2d50d8a23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jetpack-connection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80ccf01e2a373a2de8badfc143620e55dd5cd5d206f90ccb4055dc32df4883fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jetpack-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3790839f558d5d8b1639eb4af1dfcd0f8b856942399dfdc273a8c1e95676cbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4023 Malicious code in jetpack-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3790839f558d5d8b1639eb4af1dfcd0f8b856942399dfdc273a8c1e95676cbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jetpack-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78131054c2836cc0ee662da40c31bc3e2cb4c0d6fdc0fe716055acd2d50d8a23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jetpack-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e92f1176873065bfe6b74dbc035066bb56528c5184667f6453b14ee7237f76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4025 Malicious code in jetpack-connection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80ccf01e2a373a2de8badfc143620e55dd5cd5d206f90ccb4055dc32df4883fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-5HR6-R8H6-WH22 JetPack Exposure of Resource to Wrong Sphere

The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhgvcs that allowed the comments of non-published...

JetPack Exposure of Resource to Wrong Sphere

The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhgvcs that allowed the comments of non-published...

Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson TX1, Jetson TX2 Series (including Jetson TX2 NX) - April 2022

NVIDIA has released a software update for NVIDIA® Jetson AGX Xavier™ series, Jetson Xavier™ NX, Jetson TX1, Jetson TX2 series including Jetson TX2 NX in the NVIDIA JetPack™ software development kit SDK. The update addresses security issues that may lead to denial of service, escalation of...

RTLO Injection URI Spoofing

Exploit Title: WordPress Plugin Jetpack 9.1 - Cross Site Scripting XSS Date: 2022-02-07 Author: Milad karimi Software Link: https://wordpress.org/plugins/jetpack Version: 9.1 Tested on: Windows 11 CVE: N/A 1. Description: This plugin creates a Jetpack from any post types. The slider import search...

Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson TX1, Jetson TX2 Series (including Jetson TX2 NX), and Jetson Nano (including Jetson Nano 2GB) - March 2022

NVIDIA has released a software update for NVIDIA® Jetson AGX Xavier™ series, Jetson Xavier™ NX, Jetson TX1, Jetson TX2 series including Jetson TX2 NX, and Jetson Nano™ devices including Jetson Nano 2GB in the NVIDIA JetPack™ software development kit SDK. The update addresses security issues that...

WordPress Jetpack 9.1 Cross Site Scripting

Exploit Title: WordPress Plugin Jetpack 9.1 - Cross Site Scripting XSS Date: 2022-02-07 Author: Milad karimi Software Link: https://wordpress.org/plugins/jetpack Version: 9.1 Tested on: Windows 11 CVE: N/A 1. Description: This plugin creates a Jetpack from any post types. The slider import search...

WordPress Jetpack 9.1 Plugin - Cross Site Scripting Vulnerability

Exploit Title: WordPress Plugin Jetpack 9.1 - Cross Site Scripting XSS Author: Milad karimi Software Link: https://wordpress.org/plugins/jetpack Version: 9.1 Tested on: Windows 11 CVE: N/A 1. Description: This plugin creates a Jetpack from any post types. The slider import search feature and tab...

WordPress Plugin Jetpack 9.1 - Cross Site Scripting (XSS)

Exploit Title: WordPress Plugin Jetpack 9.1 - Cross Site Scripting XSS Date: 2022-02-07 Author: Milad karimi Software Link: https://wordpress.org/plugins/jetpack Version: 9.1 Tested on: Windows 11 CVE: N/A 1. Description: This plugin creates a Jetpack from any post types. The slider import search...

CVE-2021-25037

The All in One SEO WordPress plugin before 4.1.5.3 is affected by an authenticated SQL injection issue, which was discovered during an internal audit by the Jetpack Scan team, and could grant attackers access to privileged information from the affected site’s database e.g., usernames and hashed...

Sql injection

The All in One SEO WordPress plugin before 4.1.5.3 is affected by an authenticated SQL injection issue, which was discovered during an internal audit by the Jetpack Scan team, and could grant attackers access to privileged information from the affected site’s database e.g., usernames and hashed...

CVE-2021-25037

The CVE-2021-25037 entry describes an authenticated SQL injection in the WordPress plugin All In One SEO Pack, affecting versions before 4.1.5.3. Impact is disclosure of privileged data from the site database (e.g., usernames and hashed passwords) when authenticated access is present. Root-cause ...