MAL-2023-8000 Malicious code in @pagseguro/ps-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 215b7859b73d06b74ebd0b73fe0a349c7de24b2e7e87046a0f92488d2d1f32fe Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

MAL-2023-47 Malicious code in @pagseguro/pagseguro-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8e3f853a167ac4fc6f37a0c3b1b12bdba5e57f568800476f319399643b6b0fa9 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-8006 Malicious code in @pagseguro/stylelint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a77a0e8f023eb828ca6897ba36220e030972b11f244c8f48c031c928e5342367 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

MAL-2023-7997 Malicious code in @pagseguro/ps-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 492467e28bf1b4fe156c5a01fadd9b075b419bc9dc92fb95a8048b523d16cbf0 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

MAL-2023-7998 Malicious code in @pagseguro/ps-cart-recovery (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d346211619464a6ebd3e0d7ec8ea2f1eea16c76edd0f48bab81b5640c0ee16b5 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

MAL-2023-7996 Malicious code in @pagseguro/nest (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b16a70a89161283b99538bb25fdbaecc235a75a73c7a471c98ad831fc08a7cdf Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

MAL-2023-8033 Malicious code in pagseguro-utils-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f7a3386fd85bb30de547429241a02add188cf0bcb06352f465f9a5f403408db6 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

CVE-2023-26462

ThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded service credentials usable for privilege escalation are stored in an insecure format. To read this stored data, the attacker needs access to the application server or its source code...

MAL-2023-8003 Malicious code in @pagseguro/ps-security-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx dc36ef7ae93e63465de236217ebce560fe96cb785ae06b4a53b7d5733be61fbf Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

MAL-2023-8002 Malicious code in @pagseguro/ps-requests-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 454a292eff1e0d6b8df49d31d21284597d92f0a7d4690619b9c85437e8d0c597 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

CVE-2022-48149

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-48149

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-48149

CVE-2022-48149 affects the Online Student Admission System in PHP Free Source Code 1.0. The vulnerability is a SQL injection via the username parameter in the login/auth flow. Documented CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges required, no user interaction, an...

MAL-2023-1098 Malicious code in @pagseguro/pagseguro-utils-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1ca218112e7cf19df5928168bb7ac862f943cd50af825db0fd09289b710a719d Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...

K74013101: Binutils vulnerability CVE-2021-42574

Security Advisory Description An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of...

K65078159: Apache Tomcat vulnerability CVE-2021-24122

Security Advisory Description When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause wa...

CVE-2022-48337

A flaw was found in the Emacs package. This flaw allows attackers to execute commands via shell metacharacters in the name of a source-code file...

Input validation

GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u " command suggested in the eta...

CVE-2022-48337

GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u " command suggested in the eta...

Hackers Stole GoDaddy Source Code in a Multi-Year Data Breach

By Deeba Ahmed The web hosting giant GoDaddy has been rattled by an almost two-year-long data breach that went undetected from 2020 to 2022. This is a post from HackRead.com Read the original post: Hackers Stole GoDaddy Source Code in a Multi-Year Data Breach...