CVE-2024-13823

The 360 Product Rotation WordPress plugin through 1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users...

CVE-2024-13823 360 Product Rotation <= 1.5.8 - Reflected XSS

The 360 Product Rotation WordPress plugin through 1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users...

CVE-2024-13823 360 Product Rotation <= 1.5.8 - Reflected XSS

The 360 Product Rotation WordPress plugin through 1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users...

MAL-2025-3839 Malicious code in momenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f430e51962da7f325413ad52b7f901ca944587f76401dcc9b3d30f6ab15f5d0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3828 Malicious code in fastifiyer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3da19b8f86e82a5ab61d8134531f7e1f001bf858555808eca76c3f03deeff06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3823 Malicious code in ctalking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b0bd0f0689ac862a7c01e77498ff68470544cf1aa43dc3b59172ac04896d10b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3837 Malicious code in mmsdk-apml-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware babf5466e67db91bc3f90a5ad7449859bd39b7ce9dfb72a73e1ad01d022f3a0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3860 Malicious code in yandex-int (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d314fd1e5fe72ac326ff48b35eeea0675329a3035ad79569701b5e2b27c4e198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3806 Malicious code in @hotmart-org-ca/cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4248adb5119119c8a93c3615e413df74e456739391ebff8e89f978a212a0659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3831 Malicious code in helvetia-base-patterns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3682a1cff47d9425b9d7c8d820704387f078a2f5ee4dadc955da09c859c23579 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in this-is-test-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42cc414b619b36e4c74b43260274d61dc8a3eba447bb95a4bb4bea65cc510722 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2025-47278

Flask is a web server gateway interface WSGI web application framework. In Flask 3.1.0, the way fallback key configuration was handled resulted in the last fallback key being used for signing, rather than the current signing key. Signing is provided by the itsdangerous library. A list of keys can...

Session Fixation

Flask is vulnerable to Session Fixation. The vulnerability is due to incorrect key list construction and Flask passing the signing key first instead of last, allowing an attacker with access to an old signing key to generate valid session tokens and bypass key rotation...

MAL-2025-3857 Malicious code in testqwee57985 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3598ee25e4c608f570194a3c2f83121f1978733f81ee019895ec855b7acd8a48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in defipulse-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d5536c5f6bcb7069516bd2682ee50724915e891c5f1aa5c68ef38d32f9e2d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3826 Malicious code in defipulse-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d5536c5f6bcb7069516bd2682ee50724915e891c5f1aa5c68ef38d32f9e2d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-plugin-ms-adal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 361e4c6581b21fde6eeab43c3e36a75bd051771efd939b92cd3f82fbee601f6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3850 Malicious code in passport-thecity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware defb7627134320679ac575b55c8a7ef1fa8d74d48f00766173f0214a95905c3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3812 Malicious code in aads-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b029c1e1a78aa275e83e7921d7d5c50626b37543ad1031e6461707103b6c8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3852 Malicious code in react-native-plugin-ms-adal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 361e4c6581b21fde6eeab43c3e36a75bd051771efd939b92cd3f82fbee601f6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...