MAL-2024-10889 Malicious code in webpack-support-multi-domain-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df28dfaede54bce66eb7320e580118358e8db8869c014298d0a7abb4a0e43497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-support-multi-domain-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df28dfaede54bce66eb7320e580118358e8db8869c014298d0a7abb4a0e43497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-49054

creationtimestamp| type| source ---|---|--- 2024-11-22 01:38:35+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113524048830700209 2024-11-22 14:43:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113527136963470290 2024-11-22 15:44:04+00:00| seen|...

MAL-2024-10887 Malicious code in web_enhance_sap-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1929ef8619831ff03c7cb7059585b7c1004f18089f8a438ea4b45648363dc924 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10886 Malicious code in web-chat-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1410c02449b7f9317f68317b69ec23e5601c189018c375ccdcb1d453def943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10876 Malicious code in viz_schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e689b8cfd5c43cd35b51823085d1f772fa517d58837f56093c7d699294fde3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10875 Malicious code in vite-plugin-unus-api-register (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79ccf9234ae6ea621dca31ab486d57d162d4c344342f26de0924579cb3b2d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10872 Malicious code in uss-vod-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f069de485e57ad5262d4b158a8a64d396cae1798fd4fa85cf2802ac7fec711e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10788

The WordPress plugin Activity Log – Monitor & Record User Changes (up to version 2.11.1) is affected by a Stored Cross-Site Scripting (XSS) flaw in the event context due to insufficient input sanitization and output escaping. Unauthenticated attackers could inject arbitrary scripts that run when ...

CVE-2024-10788 Activity Log – Monitor & Record User Changes <= 2.11.1 - Unauthenticated Stored Cross-Site Scripting via Event Context

The Activity Log – Monitor & Record User Changes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the event parameters in all versions up to, and including, 2.11.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

MAL-2024-10869 Malicious code in storage-atom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f8d850e9e2955072a6fa29c079bda39350473f9ba56b3efec63bcc7e283c563 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-16547 · WordPress · The Activity Log – Monitor & Record User Changes

Name of the Vulnerable Software and Affected Versions: The Activity Log – Monitor & Record User Changes plugin for WordPress versions up to, and including, 2.11.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing...

WordPress plugin Activity Log – Monitor & Record User Changes 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

WordPress Activity Log – Monitor & Record User Changes plugin <= 2.11.1 - Unauthenticated Stored Cross-Site Scripting via Event Context vulnerability

Unauthenticated Stored Cross-Site Scripting via Event Context vulnerability discovered by mikemyers in WordPress Plugin Activity Log versions = 2.11.1...

MAL-2024-10866 Malicious code in ssc-ui-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b4692057b25c7aae827dac87ce67a36581c27a8efdadf6083a3bdc9787be42d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10865 Malicious code in ssc-org-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d921c8745841727abc5f7952027260365f833469b4d9c19256a95cbfd89737d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10848 Malicious code in npm-cli-release-please (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feabb1bb20620ae160755e66696df9de9c058ba94e59b0cd910e81fa6a1829a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10862 Malicious code in spex-node-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a39b71a7706221a863e8129674f28f4e5a1aec4ad4dfca5cdb243a0a4916901 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10860 Malicious code in short-link-sharer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 735cc774b56e67d8c340132e845f7d6aa2bed09a124ecb6881b05ecc323d28af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Moodle Lesson activity password bypass through PHP loose comparison

A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values...