CVE-2024-37929 WordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerability

Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4...

Malicious code in wawawa123s12sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3373d6cdf1ebe94927b4ee361ebbcb1ab21ae82c95836e692ecd16fa1b8eca49 The OpenSSF Package Analysis project identified 'wawawa123s12sd' @ 1.3.10 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10318 Malicious code in abdef (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4eb2fc563b8826f4b9b042759ccb550c442aefe0af7c3c96fe10ec0895cc02ff The OpenSSF Package Analysis project identified 'abdef' @ 1.2.9 npm as malicious. It is considered malicious because: - The package communicates...

Malicious code in abdef (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4eb2fc563b8826f4b9b042759ccb550c442aefe0af7c3c96fe10ec0895cc02ff The OpenSSF Package Analysis project identified 'abdef' @ 1.2.9 npm as malicious. It is considered malicious because: - The package communicates...

PT-2024-27834 · Unknown · Solwin User Activity Log Pro

Name of the Vulnerable Software and Affected Versions: solwin User Activity Log Pro versions through 2.3.4 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions throu...

WordPress plugin User Activity Log Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

MAL-2024-10299 Malicious code in @amagioss/js-timecode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cd0e634cb711f3c81ba053e00875d83653e7f7f70757ace4e3234b538bc5c88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10298 Malicious code in blossom-flex-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47d07f8c0d920761bbd8a7c5575c35beae11b8587240d944320d8c88434ad307 The OpenSSF Package Analysis project identified 'blossom-flex-ui' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10271 Malicious code in directv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57af5334c27c7a75d55d6c7459a1d781d609f77d8afe753179b6492c6ac8808 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10281 Malicious code in test-package2345 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 376f2c62728c1d9f82712acd63e4377bd525a0faae2b00a7746dd322c8e5379d The OpenSSF Package Analysis project identified 'test-package2345' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Video Downloader 安全漏洞

Video Downloader is a video downloading application. A security vulnerability exists in Video Downloader version 20-30.05.24. An attacker can exploit this vulnerability to execute arbitrary JavaScript code via the acr.browser.lightning.DefaultBrowserActivity component...

PT-2024-29708 · Unknown · Acr.Browser.Lightning +1

Name of the Vulnerable Software and Affected Versions: com.videodownload.browser.videodownloader aka AppTool-Browser-Video All Video Downloader version 20-30.05.24 Description: The issue allows an attacker to execute arbitrary JavaScript code via the acr.browser.lightning.DefaultBrowserActivity...

MAL-2024-10259 Malicious code in custom-ui-extension-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab5118124877f1b10d3a788f122b5860bb073bbb94ce2f89305ab74521ade9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10257 Malicious code in dragonhack-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38b1338a8aad6f97922b365716dc5b0b1ae6065a7bbe28daa4c74eefc0155c11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-50073

creationtimestamp| type| source ---|---|--- 2024-10-29 03:03:07+00:00| seen| https://t.me/cvedetector/9231 2025-08-05 12:45:10+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lvnqg5kw5i2y 2025-08-05 12:45:17+00:00| seen|...

MAL-2024-10231 Malicious code in wasabicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffb0fc29ff4926fd2ba01ef1bcfac2bb7f009eca3c1943a131b61b8b2827aa78 The OpenSSF Package Analysis project identified 'wasabicons' @ 98.98.98 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10229 Malicious code in @sixsense/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f021d4dc50ebf01ce5a1613889fcaddc92acd07499b0c461b306a6ad5407442 The OpenSSF Package Analysis project identified '@sixsense/core' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...

CVE-2024-49702

creationtimestamp| type| source ---|---|--- 2024-10-24 17:10:07+00:00| seen| https://t.me/cvedetector/8800 2024-10-24 20:06:50+00:00| seen| https://t.me/HackerArsenal/624...

MAL-2024-10227 Malicious code in @woody-mrs-potato/utils-banking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a69debf19a38ac2408ae18cd25b408c34eadd0ebd68fe0e06377b9719dd82784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Using Volatility for advanced memory forensics

TL;DR Memory forensics enhances investigations by analysing volatile data in RAM unavailable in disk forensics. Key insights from memory include running processes , network connections , encryption keys , and user activity , vital for real-time investigations. Smaller memory images 4-32 GB offer...