CVE-2024-56332

Next.js is a React framework for building full-stack web applications. Starting in version 13.0.0 and prior to versions 13.5.8, 14.2.21, and 15.1.2, Next.js is vulnerable to a Denial of Service DoS attack that allows attackers to construct requests that leaves requests to Server Actions hanging...

CVE-2024-56332: Allocation of Resources Without Limits or Throttling

Next.js is a React framework for building full-stack web applications. Starting in version 13.0.0 and prior to versions 13.5.8, 14.2.21, and 15.1.2, Next.js is vulnerable to a Denial of Service DoS attack that allows attackers to construct requests that leaves requests to Server Actions hanging...

Malicious code in lib-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a0b7fe2eb9c6236a827159916053db6e8ceb5fd8aec76e15eb7c2711d95d73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12096 Malicious code in lib-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a0b7fe2eb9c6236a827159916053db6e8ceb5fd8aec76e15eb7c2711d95d73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @add-wallet-exchange/import-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 009dc7d5e85690b3a1fdfe88879a357c8277b755a5983e5e9bcadf1e2624af1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @add-wallet-exchange/reset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb76748dbba1a0501ea786fecbf98f24109ef841f992cc7a4ebda7f06d6b95b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @add-wallet-exchange/set-imported-csv-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85e68f887715288c07927e0e74544a85fd8c7f1fd0ea7afe1ff8d50322fcaa34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11934 Malicious code in @add-wallet-exchange/reset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb76748dbba1a0501ea786fecbf98f24109ef841f992cc7a4ebda7f06d6b95b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdp-wallet-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06a2e526944349b6f95ab9040fbfdab31744714123a43d7b0de6b223d1f5fe84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in cdp-wallet-manager

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11949 Malicious code in cdp-wallet-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06a2e526944349b6f95ab9040fbfdab31744714123a43d7b0de6b223d1f5fe84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-10209

Name of the Vulnerable Software and Affected Versions Next.js versions 13.0.0 through 13.5.7 Next.js versions 14.0.0 through 14.2.20 Next.js versions 15.0.0 through 15.1.1 Description The issue is related to an unbounded resource allocation in Next.js, which can be exploited to cause a denial of...

PT-2024-40022

Name of the Vulnerable Software and Affected Versions hd wallet versions prior to 0.6.0 slip 10 versions prior to 0.6.0 note: slip 10 version 0.4 is mentioned, but it is not clear if versions after 0.4 and before 0.6 are affected, assuming 0.6 is the fixed version for slip 10 as well Description...

Digital Assets Cybersecurity Essentials

Discover essential tips to secure your digital assets like crypto, NFTs, and tokens. Learn about wallet safety, avoiding…...

CVE-2024-7747

The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This is due to a numerical logic flaw when transferring funds to another user. This makes it possible for authenticated attackers, with...

CVE-2024-7747

The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This is due to a numerical logic flaw when transferring funds to another user. This makes it possible for authenticated attackers, with...

WordPress plugin Wallet for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

CVE-2024-7747: Incorrect Conversion between Numeric Types

The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This is due to a numerical logic flaw when transferring funds to another user. This makes it possible for authenticated attackers, with...

PT-2024-38555 · WordPress · Terawallet – For Woocommerce

Name of the Vulnerable Software and Affected Versions: Wallet for WooCommerce plugin for WordPress versions up to, and including, 1.5.6 Description: The issue arises from a numerical logic flaw when transferring funds to another user, allowing authenticated attackers with Subscriber-level access...

Malware in my-wallet-backupt-decryption-tool

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...