4428 matches found
Malicious code in next-10-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b5c534bdaa68bbb90d47676a643fb06ac1c2281313fcbc5339d560275ece0c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4824 Malicious code in next-10-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b5c534bdaa68bbb90d47676a643fb06ac1c2281313fcbc5339d560275ece0c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-redux-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c925fbb7f1f8ff0a18bffa326943d62e0558498dfa914b896e91387fa6534fa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5671 Malicious code in react-redux-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c925fbb7f1f8ff0a18bffa326943d62e0558498dfa914b896e91387fa6534fa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
@atlaskit/editor-plugin-media-editing (>=0.1.0, <=1.2.1) potentially affected by unknown CVE via react-intl-next (0.0.1-security)
react-intl-next NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-intl-next and may be impacted: - @atlaskit/editor-plugin-media-editing =0.1.0, =1.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5650...
Malicious code in react-intl-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1232c7e53c78dc2566d0d6cfcc12422d7d7debe38b729c855588cca5796d0e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5650 Malicious code in react-intl-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1232c7e53c78dc2566d0d6cfcc12422d7d7debe38b729c855588cca5796d0e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-monorail-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f0a9004be0e59dea57780bc6d6ecf6d8d2cced159161b7b13030c87592bfb0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5654 Malicious code in react-monorail-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f0a9004be0e59dea57780bc6d6ecf6d8d2cced159161b7b13030c87592bfb0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in polaris-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb96b8a0229b6d2dac86029266a0106019f5ee4ffbe68e10a5a88a39865d60f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5401 Malicious code in polaris-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb96b8a0229b6d2dac86029266a0106019f5ee4ffbe68e10a5a88a39865d60f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in atomic-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f545fc86c099730890c2468a3b7fc0a7fd60e890c19cfd63721aea0c617718d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1163 Malicious code in atomic-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f545fc86c099730890c2468a3b7fc0a7fd60e890c19cfd63721aea0c617718d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Learn Cybersecurity with Palo Alto Networks Through this PCCSA Course @ 93% OFF
In the world of cybersecurity, reputation is everything. Most business owners have little understanding of the technical side, so they have to rely on credibility. Founded back in 2005, Palo Alto Networks is a cybersecurity giant that has earned the trust of the business community thanks to its...
PT-2025-8643
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel's dm-log code has been identified, where the region bitmap size is rounded up to 32 bits, but the allocated region is accessed using unsigned long pointers by t...
Stack overflow
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer overflow vulnerability affects PJSIP users that use STUN in their...
CVE-2022-32195
Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL...
CVE-2022-32195
Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL...
PT-2022-21146
Name of the Vulnerable Software and Affected Versions Open edX platform versions prior to 2022-06-06 Description The issue allows for XSS via the next parameter in the logout URL. Recommendations For versions prior to 2022-06-06, update to a version released after 2022-06-06 to resolve the issue...
