Wix Embedded MySql 代码注入漏洞

Wix Embedded MySql is a Wix Incubator open source based embedded mysql. A security vulnerability exists in Wix Embedded MySql v4.6.1 and earlier versions, which stems from a code injection vulnerability in the component com.wix.mysql.distribution.setup.apply...

CVE-2023-39021

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39021

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39021

CVE-2023-39021 applies to wix-embedded-mysql v4.6.1 and below . The vulnerability exists in the com.wix.mysql.distribution.Setup.apply function, caused by passing an unchecked argument, leading to a code injection condition. Public sources describe the impact as a high-severity, in-the-wild risk ...

CVE-2023-39021

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

Malicious code in wix-fitness-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91475bd31ece187525402450c7faff2552b2105c4f71c48120d1588d38de2e25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-commerce-ticketing-nextjs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b99bb56f643f4526ad69d487c48bec96603f7a221baf7ed0637b6cdb74d3c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-967 Malicious code in wix-commerce-ticketing-nextjs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b99bb56f643f4526ad69d487c48bec96603f7a221baf7ed0637b6cdb74d3c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-968 Malicious code in wix-fitness-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91475bd31ece187525402450c7faff2552b2105c4f71c48120d1588d38de2e25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7159 Malicious code in wix-bi-logger-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1e185d8229566fd434ef411f0f422b917f946846f53e3b81e0f5c37b3dcb0d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-bi-logger-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1e185d8229566fd434ef411f0f422b917f946846f53e3b81e0f5c37b3dcb0d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-form-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 935ce04efcc42e919ec3225f3cf06510895d6d5fdd2263ecb5cc9e7f547368ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7167 Malicious code in wix-form-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 935ce04efcc42e919ec3225f3cf06510895d6d5fdd2263ecb5cc9e7f547368ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7178 Malicious code in wix-users (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ab5c0c72f72f44702205d8403faee8dea90f615aedb3a6fa3a2521b818e2010 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-users (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ab5c0c72f72f44702205d8403faee8dea90f615aedb3a6fa3a2521b818e2010 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-chatbot-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4a7f80fb18364a54e5f27f1204e79a97e59940eb4df46398191bd2bc19fff22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-react-dealer-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 109a72276d3efcacf5837ac611bab14048767586e91b206af7a6a865153eef36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7163 Malicious code in wix-chatbot-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4a7f80fb18364a54e5f27f1204e79a97e59940eb4df46398191bd2bc19fff22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-697 Malicious code in @unpkg-semver/wix-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 910f14b4935796b6ad35693ca2a4f0c5d3c04eefe4ebd6da1e7b75cfc03fb1fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7175 Malicious code in wix-react-dealer-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 109a72276d3efcacf5837ac611bab14048767586e91b206af7a6a865153eef36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...