CVE-2024-37160 Formwork has a Cross-site scripting (XSS) vulnerability in Description metadata

Formwork is a flat file-based Content Management System CMS. An attackers requires administrator privilege to execute arbitrary web scripts by modifying site options via /panel/options/site. This type of attack is suitable for persistence, affecting visitors across all pages except the dashboard...

CVE-2024-37160 Formwork has a Cross-site scripting (XSS) vulnerability in Description metadata

Formwork is a flat file-based Content Management System CMS. An attackers requires administrator privilege to execute arbitrary web scripts by modifying site options via /panel/options/site. This type of attack is suitable for persistence, affecting visitors across all pages except the dashboard...

Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks

Muhstik botnet exploits a critical Apache RocketMQ flaw CVE-2023-33246 for remote code execution, targeting Linux servers and IoT devices for DDoS attacks and cryptocurrency mining. Infection involves executing a shell script from a remote IP, downloading the Muhstik malware binary "pty3", and...

Malicious code in testone-avisheknayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33c763adc716c4d591a2d661f71d6e12a4d2dad52c8bbc88a16da7d7948274ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in developer-integrity1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24aecacebeaf253088760161715d22f5ff77c66ecae6b73d9d1a9b984bbf8de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/voluptatem-quos-blanditiis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3ffad47dd5e4b83c52c28d23cac90196cb72fb455eb2a08e1fdbad8dc177657 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/sapiente-soluta-minima-fuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ba2381a01452c14300496fe422e31fd44ccd11eb945f3ce41296ac6c7bf3fbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/repellendus-temporibus-quaerat-nemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ccd454210a271a6f5c11fd814e15c9b2fca8c193797cb78adabd42110a4bf1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/quod-dolores-vel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381ae78404548f76cd230ae90da563e4b88c27ad7b226e6b2024a1291dc4dff0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/provident-vel-quia-suscipit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89b1fcf05dd74dcde93bd5cad3514a0b50d7a51dcf852a158ed08533a0284817 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/provident-eius-voluptatibus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6a438197140a3656a9fc9711ffea0b742baf6d76dfcaa307e43e75e0a0bb01a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/omnis-eius-quia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 367971eb7a236b3906600efb1989f34c3bc837f28ddcc6cf990a01c04fa61cd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/possimus-quos-sint-dolorem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f26570c77ce26151f094228dc886d62b30c8f116afd0ac118e51785715ebbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/nostrum-doloribus-nostrum-ullam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99fbe65153cc2a7858a52a9d7f688ab67b6c7d267cfdaa98718fe73c8e852620 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/itaque-repellat-laborum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ad033801d699d8bdcdf3a592bae3c2749a3d2eeb47efe44eb29d2ef1f1eca3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/laboriosam-eligendi-consequuntur-rem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1b1be241ce4fb018ce6914c0b57fa934a94147033a8c727b528dc6df1ab8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/esse-odio-possimus-fugit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1845f9d42c3165c597eb1f29bc80dceef9f0447b71aa084cf8efb8b2ebcc69b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/et-fugiat-dolorem-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69f13dd978f294e84f04073b38848ce840a3cdf529f9cc021425cbba996edc85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/enim-facere-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb7722f5e1f5fae80c11f3a2cc79159d2dd0983e2673a03bafc47efb0037c9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/eos-inventore-nulla-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74fbeaf3c7af8f0bbe206779c2e65ff8f8eae602e5b1212a02e3d42dd8291c30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...