15045 matches found
MAL-2024-7141 Malicious code in @zitterorg/corporis-ducimus-est (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d734be658dd6ac5a37617c0771c1fd0ff46e71215ef0444b108b8bab6daee49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7336 Malicious code in @zitterorg/quaerat-vitae-sed (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb088a85e1e2320fba0f08d9903b3d136df673cc106dac24408c71134b1b257 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7305 Malicious code in @zitterorg/numquam-assumenda (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40dbf80466e6d61a5d3a5331f58a83a7b50dfd54cce4a29d3a1bb254b9814df1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7261 Malicious code in @zitterorg/magnam-doloribus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1a2c0fe3e29bb3384921b1a0aff2c39c54bae151176af9eb6a3536f1d18006f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-20894
Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers to bypass authentication under certain condition. User interaction is required for triggering this vulnerability...
CVE-2024-5544 Media Library Assistant <= 3.17 - Reflected Cross-Site Scripting
The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the order parameter in all versions up to, and including, 3.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...
CVE-2024-5606
The Quiz and Survey Master QSM WordPress plugin before 9.0.2 is vulnerable does not validate and escape the questionid parameter in the qsmbulkdeletequestionfromdatabase AJAX action, leading to a SQL injection exploitable by Contributors and above role...
CVE-2024-5606 Quiz And Survey Master < 9.0.2 - Contributor+ SQLi
The Quiz and Survey Master QSM WordPress plugin before 9.0.2 is vulnerable does not validate and escape the questionid parameter in the qsmbulkdeletequestionfromdatabase AJAX action, leading to a SQL injection exploitable by Contributors and above role...
PT-2024-36695 · WordPress · The Quiz/Survey Master
Name of the Vulnerable Software and Affected Versions: The Quiz and Survey Master QSM WordPress plugin versions prior to 9.0.2 Description: The issue concerns a SQL injection due to the lack of validation and escaping of the question id parameter in the "qsm bulk delete question from database" AJ...
CVE-2024-21458
Information disclosure while handling SA query action frame...
CVE-2024-21458 Buffer Over-read in WLAN HOST
Information disclosure while handling SA query action frame...
CVE-2024-21458
CVE-2024-21458 affects Qualcomm WLAN/embedded platform software and is described as information disclosure due to a buffer over-read in handling the SA query action frame (Qualcomm WLAN component). Public references identify it as a WLAN HOST buffer over-read with potential information disclosure...
CVE-2024-21458 Buffer Over-read in WLAN HOST
Information disclosure while handling SA query action frame...
OESA-2024-1777 rubygem-actionpack security update
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling easy unit/integration testing that doesn't require a browser. Security Fixes: Action Pack is a framework for handling and responding to web requests. Und...
CVE-2024-6288 Conversios.io - All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 7.1.0 - Reflected Cross-Site Scripting
The Conversios – Google Analytics 4 GA4, Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tiktokuserid’ parameter in all versions up to, and including, 7.1.0 due to insufficient input sanitization and output...
CVE-2024-5864
CVE-2024-5864 concerns the Easy Affiliate Links WordPress plugin. The vulnerability arises from a missing capability check on the eafl_reset_settings AJAX action, allowing authenticated users with Subscriber-level access and above to modify the plugin’s settings in versions up to and including 3....
Malicious code in gradient-tiny (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072e069157bae3a21204a965538030cd1d107c5a79c9574cc9b663c06225b36a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Progress Software Corporation WhatsUp Gold TestController Chart denial of service vulnerability
Talos Vulnerability Report TALOS-2024-1934 Progress Software Corporation WhatsUp Gold TestController Chart denial of service vulnerability June 26, 2024 CVE Number CVE-2024-5011 SUMMARY An uncontrolled resource consumption vulnerability exists in the TestController Chart functionality of Progress...