EUVD-2022-45082

Malicious code in bioql PyPI...

EUVD-2024-43362

Malicious code in bioql PyPI...

Malicious code in @ctrl/magnet-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96e0d70a5cb3964405f7aba9078b5161152b463c1d39a33de953fd10cee2c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47133 Malicious code in @ctrl/magnet-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96e0d70a5cb3964405f7aba9078b5161152b463c1d39a33de953fd10cee2c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Embedded Malicious Code

Overview @ctrl/magnet-link is a package that parses a magnet URI into an object Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credential...

CVE-2019-19306

The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName...

CVE-2018-21080

An issue was discovered on Samsung mobile devices with N7.x software. A physically proximate attacker wielding a magnet can activate NFC to bypass the lockscreen. The Samsung ID is SVE-2017-10897 March 2018...

CVE-2024-49297

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in zohocrm Zoho CRM Lead Magnet zoho-crm-forms allows SQL Injection.This issue affects Zoho CRM Lead Magnet: from n/a through = 1.7.9.7...

CVE-2024-49297

CVE-2024-49297 : SQL Injection in WordPress plugin Zoho CRM Lead Magnet (versions <= 1.7.9.7). All sources indicate improper neutralization of input in Zoho CRM Lead Magnet, leading to injection risks with potential high impact (Confidentiality: High, Availability: Low) per CVSS v3.1. Affected...

WordPress plugin Zoho CRM Lead Magnet SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability...

PT-2024-33437 · Zoho · Zoho Crm Lead Magnet

Name of the Vulnerable Software and Affected Versions: Zoho CRM Lead Magnet versions 1.7.9.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

WordPress Zoho CRM Lead Magnet plugin <= 1.7.9.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Zoho CRM Lead Magnet versions = 1.7.9.7...

CVE-2024-7448

Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Magnet Forensics AXIOM. User interaction is required to exploit this vulnerability in that the target must...

CVE-2024-7448

CVE-2024-7448 affects Magnet Forensics AXIOM’s Android device image acquisition component. The flaw arises from improper validation of a user-supplied string prior to using it in a system call, enabling a network-adjacent attacker to execute arbitrary code with the current user’s privileges. Expl...

CVE-2024-7448 Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability

Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Magnet Forensics AXIOM. User interaction is required to exploit this vulnerability in that the target must...

CVE-2024-7448 Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability

Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Magnet Forensics AXIOM. User interaction is required to exploit this vulnerability in that the target must...

WordPress Zoho CRM Lead Magnet plugin <= 1.7.8.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Zoho CRM Lead Magnet versions = 1.7.8.8...

CVE-2023-42128

Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Magnet Forensics AXIOM. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-42128

Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Magnet Forensics AXIOM. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-42128

Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Magnet Forensics AXIOM. User interaction is required to exploit this vulnerability in that the target must...