Malicious code in grrrck.positron-plus-1-e (VSCode:https://open-vsx.org)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 820ed4b566cf0f19a7737abc11d761b56b64960adae0b4a7e53d3e95a31cf59a This extension is malicious. When installed it runs an info stealer that exfiltrates user data including credentials and cryptocurrency...

EUVD-2009-1037

Malware in sbrugna...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI...

CVE-2009-1036

The linked records indicate a CSRF vulnerability in the Drupal Plus 1 module, versions before 6.x-2.6. The root cause is not described beyond CSRF allowing remote attackers to cast votes for content via unspecified URI aspects. Affected product: Plus 1 module for Drupal (pre-6.x-2.6). There is no...

CVE-2009-1036: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI...

SA-CONTRIB-2009-010 Plus 1 - Cross-site request forgery

The Plus 1 module provides a voting widget for content that records votes using Ajax. The URL for voting is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Versions of Plus 1 prior to 6.x-2.6 Drupal core is not...