Malicious code in rey-vue-smarttable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98a856f629a1b4854c5202dbdd7b0919ec1ad20cd28a8fa2b52591843913f112 The OpenSSF Package Analysis project identified 'rey-vue-smarttable' @ 19.19.19 npm as malicious. It is considered malicious because: - The...

MAL-2024-1555 Malicious code in rey-vue-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 247fab9bb0397ec89a23c30830567d777402a4710831af3d3edfc1c1c6dd2328 The OpenSSF Package Analysis project identified 'rey-vue-common' @ 19.1.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in rey-vue-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 247fab9bb0397ec89a23c30830567d777402a4710831af3d3edfc1c1c6dd2328 The OpenSSF Package Analysis project identified 'rey-vue-common' @ 19.1.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in vue2-webviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95a66e858fcc284e27c0e0ac5e2d76de3b0f6c670ac21a185369832d45f40f5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-webviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a4cb498523fdac707f6db2f94f8c3478545fcec92545e4a59dff966b9cbaa87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1549 Malicious code in vue-webviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a4cb498523fdac707f6db2f94f8c3478545fcec92545e4a59dff966b9cbaa87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

lesli-vue (>=1.0.1, <=1.0.3) potentially affected by CVE-2024-34341 +1 more via trix (>=2.0.8, <=2.0.10)

trix NPM version =2.0.8, =1.0.1, =1.0.3 Source cves: CVE-2024-34341, CVE-2024-43368 Source advisory: OSV:GHSA-QJQP-XR96-CJ99...

Malicious code in vue2-amis-custom-widget-kk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de21054a3b5e13b8447bf6f0be9f2fe496ccdc7a29fd73162292d1373ed8437f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-31760

An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component...

CVE-2024-31760

An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component...

Gin-Vue-Admin 安全漏洞

Gin-Vue-Admin is a full-stack pre-development infrastructure platform based on Vue and Gin development. A security vulnerability exists in Gin-Vue-Admin version 2.4.x that stems from a vulnerability that allows an attacker to escalate privileges via the Session Expiration component...

PT-2024-24200 · Unknown · Gin-Vue-Admin

Name of the Vulnerable Software and Affected Versions: sanluan flipped-aurora gin-vue-admin versions 2.4.x Description: An issue in the Session Expiration component allows an attacker to escalate privileges. Recommendations: For versions 2.4.x, consider restricting access to the Session Expiratio...

CVE-2024-31760: Incorrect Privilege Assignment

An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component...

CVE-2024-31760

An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component...

Path Traversal

gin-vue-admin is vulnerable to Path Traversal. The vulnerability is due to improper validation for PlugName field within a struct, which allows an attacker to perform directory traversal by manipulating the plugName parameter in the Plugin System - Plugin Template feature...

CVE-2024-31457

gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System - Plugi...

CVE-2024-31457 gin-vue-admin background arbitrary code coverage vulnerability

gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System - Plugi...

CVE-2024-31457 gin-vue-admin background arbitrary code coverage vulnerability

gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System - Plugi...

CVE-2024-31457

Gin-vue-admin (CVE-2024-31457) has a backend code-injection risk via a directory-traversal flaw in the Plugin Template feature. The AutoPlug flow accepts PlugName, and through crafted input (e.g., ../../../server/ and related PoC payloads) an attacker can create or modify folders like api, config...

CVE-2024-31457 gin-vue-admin background arbitrary code coverage vulnerability

gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. gin-vue-admin pseudoversion 0.0.0-20240407133540-7bc7c3051067, corresponding to version 2.6.1, has a code injection vulnerability in the backend. In the Plugin System - Plugi...