15036 matches found
Exploit for CVE-2023-30486
CVE-2023-30486 Square = 2.0.0 - Missing Authorization via...
MAL-2024-9122 Malicious code in a0npiv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9262fb00b603624e8a910b13020f09123308704143ec1ad3c5fe9be5eebf1cd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9168 Malicious code in new-code-script-f-r-e-e-actors-tycoon-script-t5fhi5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a5f1736ff58b1ee45e9727786fd5a975016912c7d0aaef296236022638c8fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9157 Malicious code in knu2bb (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 244d62f88aebd6b02796516f10f0cb8eba074b905b90a8c3cb938789c12c04f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9176 Malicious code in owqhxw (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beae6c77c9a8708ea7619fe8393991b7143c2b306569693c9771cd0c6674c0bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9154 Malicious code in hhdoa7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a302cd7fa3f803cc3d7b9c99221da9d4e0630350bebdb57a97eef0c917e14b41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9143 Malicious code in em5tbe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 492f9a997b1926900687c4080a687bfd21307fcdca9a1e6d5a491ce2453f1ca0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9129 Malicious code in bax09p (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcbe89e83a3525a38ef8c85c8398b5fa61610e9c9bc8d485209f0f865b963a61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9144 Malicious code in entrevista_devops (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e84ab390a4729b0652cea2e8ce772020b7ace4b26cbc3c22fc760d4609028fd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9128 Malicious code in backend-engineering-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba3d379889155c3bbca462ca410261268a1d3a1a0d824d8108c2e4a9a225e8b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9165 Malicious code in makebetteremail (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c05ae267bfe19d2a54f813347f8df26dc550dbe7da0b20207863fd732bcd55d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-25285
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2024-25283
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
PT-2024-39761 · WordPress · Notification For Telegram
Name of the Vulnerable Software and Affected Versions: The Notification for Telegram plugin for WordPress versions up to, and including, 3.3.1 Description: The issue allows authenticated attackers with subscriber-level access and above to send unauthorized test messages via the Telegram Bot API t...
CVE-2024-25282
Redsys 3DSecure 2.0 (3DS Method Authentication) is reported vulnerable to Cross‑Site Scripting (XSS) via a modified params parameter in a /rest/online request with a /redirect?action=challenge&txn=... path. Root cause: insufficient sanitization/validation of the params field, which is base64-enco...
EulerOS 2.0 SP12 : docker-runc (EulerOS-SA-2024-2501)
According to the versions of the docker-runc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an...
CVE-2024-25285
CVE-2024-25285 is associated with Redsys 3DSecure 2.0. The vulnerability allows form action hijacking on the threeDSMethod.jsp endpoint, via manipulation of the threeDSMethodNotificationURL or threeDSMethodData parameters, enabling redirection of form submissions to a malicious destination and po...