Malicious code in mw-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab85f947099773c7e6dd5b4c3abd115db9beee7e407c87916ef282f8992ac845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unit-testing-controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206ebabfab4ea20b85ed6293c085ea8a6c0c0d85a70a1616a1963ac8556cf315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @chainxxx/act-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 664f2c7fae7cf7210c9705398c8deb45d7468131ad49bed2b3ca8738f62edf96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sd-v13.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61d641e6795079f0b94c5254c8bd4fb6173a3e2b92512c79c76ed351c4868d8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CGI Abuse

Gitlab is vulnerable to CGI Abuse. An attacker can abuse scan execution policies to run pipelines as another user compromising Confidentiality and Integrity of the system...

Malicious code in discord.js-self-v21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7ff51b0a254299fbcba44e692ad912d759a48d835ffcb10759424392b1debdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Craft CMS 4.4.14 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Craft CMS unauthenticated Remote Code Execution RCE', 'Description' = %q This module exploits Remote Code Execution vulnerability CVE-2023-41892 ...

Malicious code in reduced-ui-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb32f57ffb8cf2bb877f64d7d6c9c15003011d5985401e6d7a9cd4e267a5c2d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hpulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8e05ef1449de96d2983cf58d8db74565a1a331c63044ce1c166505af88b7409 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crossdomain-xhr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab343d1f78365f0bc2589bd835b94aa0fd90723d8e80a9d0b774a3a99589b0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paalni (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80fe310fa14b18a156e781ff55555ecf5c96db6a03102615f4a93d8e961db75a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-unofficial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2cfb5f5169ea123ccc46368108dd1e9dc29b9a693076f78222663d3de02c2bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-6723

An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise...

CVE-2023-6723

An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise...

Unrestricted file upload

An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise...

CVE-2023-6723 Unrestricted Upload of File with Dangerous Type in Repox

An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise...

CVE-2023-6723 Unrestricted Upload of File with Dangerous Type in Repox

An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise...

Malicious code in cronos-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28e64c01e4b9cd54a06e2eca183963b81038522ef15da56fc116a385458c783d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8671 Malicious code in cosmos-wallet-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6583493058b4f8536df13eb5c7c6418badcae8f4c6cb5122d75ad79db0f174fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-5762

The Filr WordPress plugin before 1.2.3.6 is vulnerable from an RCE Remote Code Execution vulnerability, which allows the operating system to execute commands and fully compromise the server on behalf of a user with Author-level privileges...