WordPress plugin Feed Them Social 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Feed Them...

PT-2022-16697 · WordPress · The Visualizer: Tables/Charts Manager For Wordpress

Name of the Vulnerable Software and Affected Versions: The Visualizer: Tables and Charts Manager for WordPress versions up to, and including 3.7.9 Description: The issue concerns deserialization of untrusted input via the remote data parameter. This allows authenticated attackers with contributor...

PT-2022-16649 · WordPress · Feed Them Social

Name of the Vulnerable Software and Affected Versions: Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress versions up to, and including 2.9.8.5 Description: The issue allows deserialization of untrusted input via the fts url parameter. This enables unauthenticated attacker...

Visualizer: Tables and Charts Manager for WordPress < 3.7.10 - Contributor+ PHAR Deserialization

The plugin does not validate the ‘remotedata’ parameter allowing contributor and above roles to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP objects when a POP chain is present...

Malicious Package

Overview react-swipeable-wrapper-example is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable i...

Malicious code in editor-with-wrapper-no-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51686c2414d61dee9e94ea84369aa9e2aac2ae6984737e6007c2566b8a9ff569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viewer-with-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66a8e562679fbf09b06a6287638fe461f954f8a4317f709aaa891e97be95be34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in editor-with-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50810274815cc122c9e2f2b32e58d400a2c18128d505458cc04673676b46b504 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6929 Malicious code in viewer-with-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66a8e562679fbf09b06a6287638fe461f954f8a4317f709aaa891e97be95be34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2668 Malicious code in editor-with-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50810274815cc122c9e2f2b32e58d400a2c18128d505458cc04673676b46b504 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5663 Malicious code in react-overlays-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ec5e5b499d06ac9ad3a7ec68fa8419625dca65d4e534e4a449739421e23e64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-overlays-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ec5e5b499d06ac9ad3a7ec68fa8419625dca65d4e534e4a449739421e23e64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdk-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f9f4fe9064836db3994b0e2e6eb32cabfee5c17ae2e4a2eb2e333471854fcd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1855 Malicious code in cdk-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f9f4fe9064836db3994b0e2e6eb32cabfee5c17ae2e4a2eb2e333471854fcd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 0x-fee-wrapper-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a9d80927be2fbab050ca79fbed448dcc2058ca5eb8ea27c28fffedc5d6ab3a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30744

DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.220431 allows attacker to execute arbitrary code...

Vote locking should block wrapper contracts

Lines of code Vulnerability details The reason that users are given boosted rewards for locking their governance tokens is that by making them illiquid for a set amount of time, the supply available to be sold is restricted, and users buying the token are more able to push the price up. Impact By...

ssl-utils 操作系统命令注入漏洞

ssl-utils is a wrapper for some OpenSSL commands around Node.js. A security vulnerability exists in ssl-utils version 1.0.0, which can be exploited by an attacker to execute arbitrary commands...

rpnet (>=0.0.1 <=0.1.0), rpnet-dev (>=0.0.5 <=0.0.12) +4 more potentially affected by unknown CVE via tensorflow-gpu (=2.7.0)

tensorflow-gpu PYPI version =2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - rpnet =0.0.1, =0.0.5, =1.0.5, =1.1.1 - tpu-tf2 =1.0.0 - troj =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-MW6J-HH29-H3...

rpnet (>=0.0.1 <=0.1.0), rpnet-dev (>=0.0.5 <=0.0.12) +4 more potentially affected by CVE-2022-29212 via tensorflow-gpu (=2.7.0)

tensorflow-gpu PYPI version =2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - rpnet =0.0.1, =0.0.5, =1.0.5, =1.1.1 - tpu-tf2 =1.0.0 - troj =1.0.0 Source cves: CVE-2022-29212 Source advisory:...