MAL-2024-8783 Malicious code in lowieore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aee12758726ca763aa3b9a8c5b3a492e79c280660011160f23e7e170951a91e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8772 Malicious code in hwieuor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb2cbc673e05c4390b6cd2ec1907ab9c70242a26d924f3c307cb19e894d99ec5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8816 Malicious code in ywpeirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7bb3df4329eb6ef5da8694013edde70bd0e1a2aaba9c23e5b1cd487f7995899 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8784 Malicious code in lwoeur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81fac843cec1179c3e2247c70da355475ae4f30ac7617847e33717d39466a049 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8780 Malicious code in kliowir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae9c0143aa8343d7e77d64567bd943e19c947dc7e1f9df6b2976ec22b8c3e749 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8785 Malicious code in mayaseven5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caaacc480504955b08d266c86d1eea4dd3e75bc0658fc6293aee05cbcde36158 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8753 Malicious code in cap-client-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f18ed3c31f0a20e7a224256d46a896df654fcaf6e60ac3f4fac7639672b320f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-34643

Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vulnerability...

CVE-2024-6926

CVE-2024-6926 affects the Viral Signup WordPress plugin (versions up to and including 2.1). The issue is an SQL injection caused by insufficient escaping/sanitisation of a user-supplied parameter used in a SQL query via an unauthenticated AJAX action. The vulnerability is documented as affecting ...

CVE-2024-6926 Viral Signup <= 2.1 - Unauthenticated SQLi

The Viral Signup WordPress plugin through 2.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

Raspcontrol 跨站脚本漏洞

Raspcontrol is a web control center written in PHP for the Raspberry Pi by Doug W., a personal developer. A cross-site scripting vulnerability exists in Raspcontrol version 1.0, which stems from a cross-site scripting XSS vulnerability via the parameter action in index.php...

LatePoint <= 4.9.91 - Cross-Site Request Forgery

Description The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.9.91. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a...

PT-2024-38995 · Bioshox · Raspcontrol

Name of the Vulnerable Software and Affected Versions: Raspcontrol version 1.0 Description: A Cross Site Scripting XSS issue exists through the action parameter in index.php. This allows an attacker to send a specially crafted JavaScript payload to an authenticated user, potentially hijacking the...

MAL-2024-8711 Malicious code in dowload_ebok_everything_in_between_a_rocker_romance_by_melissa_toppen_fp7ge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 518194a6d73fb788c4361e345baeff8bf7b2a615ace3cb6726710f0fff9efe9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8719 Malicious code in muthu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 685a60c5c7b1a25ac7c5953df4a74e2f9e979dab99a7225199c06ec36361b8b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8722 Malicious code in muthuthehacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9c70da09f0a152dd4b4ccda2553a4a0ed73802be2829b6fe7b5186932ae8375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8720 Malicious code in muthuhacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1182ad621bb84725caaefb330e0f2c7826ba7a78894d1f5a207d0daf17bf0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()

A vulnerability was found in the Linux kernel's networking subsystem in the actapi implementation within the tcfidrcheckalloc function, which lead to a possible infinite loop when multiple actions with the same index are added, causing the second request to block indefinitely while holding the...

kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()

A vulnerability was found in the Linux kernel's networking subsystem in the actapi implementation within the tcfidrcheckalloc function, which lead to a possible infinite loop when multiple actions with the same index are added, causing the second request to block indefinitely while holding the...

MAL-2024-8690 Malicious code in @diotoborg/voluptas-nulla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cb2634112356d45f74f3822a4964ae5b2dc5c5061c240df9b26b835f34b06ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...