CVE-2023-49097 ZITADEL vulnerable account takeover via malicious host header injection

ZITADEL is an identity infrastructure system. ZITADEL uses the notification triggering requests Forwarded or X-Forwarded-Host header to build the button link sent in emails for confirming a password reset with the emailed code. If this header is overwritten and a user clicks the link to a malicio...

Malicious code in custom-cafe-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33dd3e8d4d58a7d69fd542ddab857dc16f6d942320661ddb6a637eeae7d61b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8631 Malicious code in @lognex/notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa9236ea5d072a10fa7e7acc48f2a65e85f8ad6cc9edd1158828a3ff4db63ba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8625 Malicious code in @ukncsc/my-ncsc-ui-common-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9535a39a8207d1d902daf4cfaaad312cc4bae19928fa3d2311e2be1f0ec9b027 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oddsfire-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6560345fe7b94e452865d383a96b49b27e71c7113505ddfd5306218da9648d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8619 Malicious code in oddsfire-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6560345fe7b94e452865d383a96b49b27e71c7113505ddfd5306218da9648d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8614 Malicious code in tessa-npm-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e612f6e8fb0bbb74366928dddf1b34e91f54e4bef8567591fae02dc94d22461e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in docusaurus-plugin-matamohnhb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b5b41d16d3e36f98cc25eaf6597bab9798a9b8838ff2e483cc58768a151188 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wehackrepos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c49ad5602ec9e0e00a9541dfd9e6fb3a7a4ae437f82ee23bd59a91ea4ec9e32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Tell Me Your Secrets Without Telling Me Your Secrets

The title of this article probably sounds like the caption to a meme. Instead, this is an actual problem GitGuardian's engineers had to solve in implementing the mechanisms for their new HasMySecretLeaked service. They wanted to help developers find out if their secrets passwords, API keys, priva...

Malicious code in purchase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 818b7cf6f19f5659849b9ba6ea11d5b53b47330d31838d371590e07f9107bfe3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-47315

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. This secret is used to sign the application’s JWT token and verify the incoming user-supplied tokens...

CVE-2023-47315

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. This secret is used to sign the application’s JWT token and verify the incoming user-supplied tokens...

CVE-2023-47315

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. This secret is used to sign the application’s JWT token and verify the incoming user-supplied tokens...

Hardcoded credentials

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. This secret is used to sign the application’s JWT token and verify the incoming user-supplied tokens...

CVE-2023-47315

Headwind MDM Web panel 5.22.1 is affected by CVE-2023-47315 due to a hard-coded JWT secret that signs and verifies tokens, enabling Incorrect Access Control. The secret is embedded in the source, which is publicly accessible, allowing token forgery or tampering. Impact is described as high (CVSS ...

Headwind MDM Trust Management Issue Vulnerabilities

Headwind MDM is a platform for managing Android devices in the enterprise. A trust management issue vulnerability exists in Headwind MDM Web panel version 5.22.1, which stems from the use of hardcoding in JWT Secret, resulting in an access control error...

PT-2023-9023 · Headwind · Headwind Mdm Web Panel

Name of the Vulnerable Software and Affected Versions: Headwind MDM Web panel version 5.22.1 Description: The issue is related to the use of hard-coded credentials in the JWT Secret Handler component of the Headwind MDM software. This allows a remote attacker to gain access to credentials by...

CVE-2023-47315

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. This secret is used to sign the application’s JWT token and verify the incoming user-supplied tokens...

WordPress UserPro 5.1.x Password Reset / Authentication Bypass / Escalation

Vulnerability Details & Technical Analysis Password Reset to Privilege Escalation using the Sensitive Information Disclosure via Shortcode Description: UserPro = 5.1.1 – Insecure Password Reset Mechanism Affected Plugin: UserPro Plugin Slug: userpro Affected Versions: = 5.1.1 CVE ID: CVE-2023-244...