246 matches found
MAL-2022-5727 Malicious code in redux-cations (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75da2b1d6ce3300bfe7396bf882c7fd061003df2bde7ca6b90287a17b1d7ebfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Use of a One-Way Hash with a Predictable Salt in Redux Gutenberg_Template_Library_\&_Redux_Framework
Unauthenticated Sensitive Information Disclosure CVE-2021-38...
Malicious Package
Overview redux-data-model-documentation is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...
Malicious code in splitio-redux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afcb6d86424d022ccbf1a6f40489d4951f0b57f29e2527a231dbe5087029dba4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6237 Malicious code in splitio-redux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afcb6d86424d022ccbf1a6f40489d4951f0b57f29e2527a231dbe5087029dba4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-redux-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c925fbb7f1f8ff0a18bffa326943d62e0558498dfa914b896e91387fa6534fa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5671 Malicious code in react-redux-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c925fbb7f1f8ff0a18bffa326943d62e0558498dfa914b896e91387fa6534fa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in redux-data-model-documentation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53b5812f64dc0e890eccf730c2030854531411dc41a95fa540bd122043cbcc01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5728 Malicious code in redux-data-model-documentation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53b5812f64dc0e890eccf730c2030854531411dc41a95fa540bd122043cbcc01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Use of a One-Way Hash with a Predictable Salt in Redux Gutenberg_Template_Library_\&_Redux_Framework
cve-2021-38314 - Unauthenticated Sensitive Information Disclos...
Mars: Unauthenticated Sensitive Information Disclosure on █████████ CVE-2021-38314
The Gutenberg Template Library & Redux Framework plugin version 4.2.11 and below was found to have an unauthenticated sensitive information disclosure vulnerability CVE-2021-38314. The issue was identified where the plugin registered several AJAX actions that were accessible to unauthenticated...
Exploit for Use of a One-Way Hash with a Predictable Salt in Redux Gutenberg_Template_Library_\&_Redux_Framework
CVE-2021-38314 Python Exploit Detail The Gutenberg Templat...
WordPress WP Mail Logging plugin <= 1.9.9 - Using Components with Known Vulnerabilities (vulnerable Redux Framework version)
Using Components with Known Vulnerabilities vulnerable Redux Framework version - CVE-2021-38312, CVE-2021-38314 discovered by Rotem Reiss in WordPress WP Mail Logging plugin versions = 1.9.9. Solution Update the WordPress WP Mail Logging plugin to the latest available version at least 1.10.0...
WP Mail Logging < 1.10.0 - Outdated Redux Framework
The plugin uses an outdated version of the Redux Framework, which is know to be affected by security issues CVE-2021-38312 and CVE-2021-38314, and could allow unauthenticated attackers to change some of the Framework settings by using CVE-2021-38314 PoC The first endpoint we can identify is...
WordPress Gutenberg Template Library & Redux Framework Plugin < 4.2.13 Multiple Vulnerabilities
The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
Gutenberg Template Library & Redux Framework Plugin for WordPress < 4.2.13 Incorrect Authorization
The WordPress Gutenberg Template Library & Redux Framework Plugin installed on the remote host is affected by an incorrect authorization vulnerability leading to arbitrary plugin installation and post deletion. Note that the scanner has not tested for these issues but has instead relied only on t...
Travelpayouts < 1.0.17 - CSRF Bypass due to Outdated Redux Framework
The plugin is using an outdated version of the Redux Framework 4.1.17, which is affected by CSRF bypass issues due to a logic flaw in the checks, allowing attacker to make logged in do unwanted actions...
Authorization
The Gutenberg Template Library & Redux Framework plugin = 4.2.11 for WordPress used an incorrect authorization check in the REST API endpoints registered under the “redux/v1/templates/” REST Route in “redux-templates/classes/class-api.php”. The permissionscallback used in this file only checked f...
