MAL-2024-8641 Malicious code in @diotoborg/sunt-necessitatibus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecb28cace7ea08830b4ff040a369816454de2049252f343fb07bfc2c21f6cb5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8138 Malicious code in @diotoborg/architecto-quis-asperiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 816ba768980666c6d91c009857257420aaf4e8226c8ea5d292c8bf0041d4c4fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8467 Malicious code in @diotoborg/nisi-quo-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0908f2553c6dfc3cd05996486b36038ef448e6edd37f5184964e353fca4605ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8666 Malicious code in @diotoborg/ullam-molestias (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f4ed712d646112b0456676bf64cde4daef17864537618a1525386bfcbb89cc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8391 Malicious code in @diotoborg/labore-aspernatur-nobis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a6ceed3753292748ba1d0950f8a70059d5db5098e87c6f79c41047850c4bdea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8191 Malicious code in @diotoborg/corporis-quia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59acaa380bd9c7d27077eaccd9cef18cd1320be96d0149bbf7077e8a63bcfb27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8181 Malicious code in @diotoborg/consequatur-aut (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b38f99724da74d1e7bea878e41ad46aa074328e87933aafbd9ab3f6c012adf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8346 Malicious code in @diotoborg/fugiat-nobis-praesentium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35b4d0d3ebd6e3ad1e2388a088334ec1601273b27b35e9d91475a38219445a02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8152 Malicious code in @diotoborg/at-eos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c39735caa2d27399c1cdd3e469549b98a191de327828414c58394d48a9b2558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8417 Malicious code in @diotoborg/maxime-iste (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75ccce5fc3cdb2b072a81eba1c102b1e97c7d3411792050ce49ea8a0d7004b2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8254 Malicious code in @diotoborg/doloribus-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8405d3abf6ffe56ee4efae195dc6be6739773e416920b2cffc848b4fcc9616e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8203 Malicious code in @diotoborg/cum-illum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f83e9fe6ebfbe1d3347d2fe4fd6b9c4a54f4cb82b292187610dbc94713ffb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8674 Malicious code in @diotoborg/velit-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46bb200184e2cc10c5ba0b8f1e715d83db5fa972d34f0938f2cb317b71def992 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8557 Malicious code in @diotoborg/quia-eaque-molestiae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 130c86b4e5b467f59296bf134c9b20c18912a3c346a04e295f9b7a3b8ad267ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8569 Malicious code in @diotoborg/quis-fugit-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3de97e1bfd22b3f69508fd3556824feb0c1d8d2aa4675023e64e59188960fb5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8579 Malicious code in @diotoborg/quo-neque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8feabd1d57e9c96d3054cd7555e65787cba38d8f395639ba801d91949efb4ff3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8311 Malicious code in @diotoborg/eum-tempora-distinctio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a5d4b1d168bf71f91f6262c1c46d9722df779c8dd61ca554a9e142dcae0b2b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-31682 · Redcap · Redcap

Name of the Vulnerable Software and Affected Versions: REDCap version 14.7.0 Description: The issue allows HTML injection via the project title of a New Project action. This can lead to resultant logout CSRF via "index.php?logout=1", and can also be used to insert a link to an external phishing...

CVE-2024-5212

The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envatocode’ parameter in all versions up to, and including, 5.0 due to insufficient input sanitization and output escaping within the onajaxregisterforumuser function. This makes it possible for...

Ruby on Rails Action View MIME Memory Exhaustion

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ruby on Rails Action View MIME Memory Exhaustion', 'Description' = %q This module exploits a Denial of Service DoS condition in Action View that...