MAL-2024-12094 Malicious code in ui-forms-embed-components-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7 The OpenSSF Package Analysis project identified 'ui-forms-embed-components-reporting' @ 1.21.0 npm as malicious. It is considered malicious...

Malicious code in parliament-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83403e5a067a527fcc2b02f581d2e85cf4f87645402589b407e06ad3f52c100c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12092 Malicious code in parliament-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83403e5a067a527fcc2b02f581d2e85cf4f87645402589b407e06ad3f52c100c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Search/Node Information Section component in the user interface of SolarWinds Platform’s network monitoring and IT infrastructure management software allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the Search/Node Information Section component in the user interface of SolarWinds Platform’s network monitoring and IT infrastructure management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a...

MAL-2024-12071 Malicious code in mindmeld-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a8a75e39faab7069391e00d607d1ebe4f96a84eecc48eb90e3430e19332ecf3b The OpenSSF Package Analysis project identified 'mindmeld-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in mindmeld-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a8a75e39faab7069391e00d607d1ebe4f96a84eecc48eb90e3430e19332ecf3b The OpenSSF Package Analysis project identified 'mindmeld-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Huawei HarmonyOS and EMUI Denial of Service Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A denial of service vulnerability exists in Huawei...

PT-2024-10780 · Omg2000 +1 · Omg2000 +1

Name of the Vulnerable Software and Affected Versions: oMG2000 versions 3.15.1 and earlier MG90 versions 4.2.1 and earlier Description: A command injection is possible through the user interface, allowing arbitrary command execution as the root user. Recommendations: For oMG2000 versions 3.15.1 a...

CVE-2024-54663

An issue was discovered in the Webmail Classic UI in Zimbra Collaboration ZCS 9.0 and 10.0 and 10.1. A Local File Inclusion LFI vulnerability exists in the /h/rest endpoint, allowing authenticated remote attackers to include and access sensitive files in the WebRoot directory. Exploitation requir...

Malicious code in apache-airflow-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6c372df22c9d32de9b2be3a877474b47fc253abc67f5b69d611ebc9640559fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in serum-dex-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e693f28915ad1c0bf05e8f5e0e1cab49a329f00b7f27303d08ec76d8ab068f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12066 Malicious code in zarf-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8697bcf4cd06bebdca6e5806069048fc48ce173a5deb372b5992e95df3e0103a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zarf-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8697bcf4cd06bebdca6e5806069048fc48ce173a5deb372b5992e95df3e0103a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11941 Malicious code in apache-airflow-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6c372df22c9d32de9b2be3a877474b47fc253abc67f5b69d611ebc9640559fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12038 Malicious code in serum-dex-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e693f28915ad1c0bf05e8f5e0e1cab49a329f00b7f27303d08ec76d8ab068f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12045 Malicious code in tiktok-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50583d9b69442a311dc38ffa7bb2a8d8f476b282ed859fa472dafd4672205809 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-54663

An issue was discovered in the Webmail Classic UI in Zimbra Collaboration ZCS 9.0 and 10.0 and 10.1. A Local File Inclusion LFI vulnerability exists in the /h/rest endpoint, allowing authenticated remote attackers to include and access sensitive files in the WebRoot directory. Exploitation requir...

Progress Telerik UI for WPF 2024.4.1213 (CVE-2024-10095)

The version of Progress Telerik UI for WPF installed on the remote host is prior to 2024.4.1213. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-10095 advisory. - In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible...

Cross-site Scripting (XSS)

ibexa/admin-ui is vulnerable to a Cross-Site Scripting XSS. The vulnerability is due to improper sanitization in the Content name pattern mechanism, which is used to build Content names from one or more fields. Exploitation requires Content edit permissions, allowing an attacker to inject malicio...

Malicious code in @bh-ui/theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d15abe0453d257e63379c13d84f7269d636310eb7d9abb1a0ae02740475e71ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...