13132 matches found
CVE-2023-48335 WordPress Hide login page plugin <= 1.1.9 - Secret Login Page Location Disclosure on Multisites vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Webcraftic Hide login page allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hide login page: from n/a through 1.1.9...
CVE-2023-47818 WordPress LWS Hide Login plugin <= 2.1.8 - Secret Login Page Location Disclosure on Multisites vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in LWS LWS Hide Login allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LWS Hide Login: from n/a through 2.1.8...
PYSEC-2024-321
A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modification of the base repository or...
The vulnerability of the secure_compare() function in the Mojolicious module allows a hacker to obtain the length of the secret string.
The vulnerability of the securecompare function in the Mojolicious module relates to manipulating an unknown input, which leads to a timing mismatch vulnerability. Exploiting this vulnerability could allow a remote attacker to obtain the length of the secret string...
Malicious code in test-lib-avishek (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b09a9d57bb929d0c7ba93b90c01ea2a5270838a233ae120bdade2730d5c6e364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1526 Malicious code in testone-avisheknayal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33c763adc716c4d591a2d661f71d6e12a4d2dad52c8bbc88a16da7d7948274ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in developer-integrity1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24aecacebeaf253088760161715d22f5ff77c66ecae6b73d9d1a9b984bbf8de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1482 Malicious code in @juiggitea/ratione-debitis-ratione-dignissimos (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f49703880366582d0f134e1c54fac01c6ca116430d231e7685b463c350aa0a6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1485 Malicious code in @juiggitea/repellendus-temporibus-quaerat-nemo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ccd454210a271a6f5c11fd814e15c9b2fca8c193797cb78adabd42110a4bf1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1477 Malicious code in @juiggitea/quisquam-sequi-assumenda-tempora (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74f4f87d5fc22464c92ce7381edf7746038ffda0ba242305c5e150765936e118 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1469 Malicious code in @juiggitea/possimus-quos-sint-dolorem (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f26570c77ce26151f094228dc886d62b30c8f116afd0ac118e51785715ebbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1462 Malicious code in @juiggitea/odit-sint-sapiente (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf0471115ede4ad3d0176eb4bf0757f5975368abc3306fd03a27603c032e2a98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1457 Malicious code in @juiggitea/nostrum-a-molestias (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99199280fb22a96400c7c5464e90c6b2e70428de874fbab885afd7e999d0de09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @juiggitea/minima-illum-deserunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b930a9e55f36dc9412e578c0625000300f73f7e75801dd3bfe158ac3778b42f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @juiggitea/minus-odit-esse-ut (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 043d7c1efd8c7973aa2be1f8891e28c3d0c428e7f9492a9efc5b8f9a0c8e3f41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1441 Malicious code in @juiggitea/itaque-repellat-laborum (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ad033801d699d8bdcdf3a592bae3c2749a3d2eeb47efe44eb29d2ef1f1eca3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1435 Malicious code in @juiggitea/et-fugiat-dolorem-possimus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69f13dd978f294e84f04073b38848ce840a3cdf529f9cc021425cbba996edc85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @juiggitea/et-fugiat-dolorem-possimus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69f13dd978f294e84f04073b38848ce840a3cdf529f9cc021425cbba996edc85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1436 Malicious code in @juiggitea/fuga-aliquid-vitae-et (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea1bbb0400ecc01d32c5db603eee1b14b65200c757b01f338c2fc83e4a260760 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1428 Malicious code in @juiggitea/eius-excepturi-velit-aliquid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7a95e3ecbcb7eadeb5b4b6776686814e89ffb0ab15a81590dc272f8636b7145 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...