MAL-2024-7500 Malicious code in sap-addcomment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8df2eaaea1ef6b7bc78fa9ed808cd5b2150abf1c7f9dd98694505388e77b589 The OpenSSF Package Analysis project identified 'sap-addcomment' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7499 Malicious code in sap-addauthitemform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b04239faf81734ad72467bb3ad94efbd1b815f6a57fe59ab82bc8a60571f7ae7 The OpenSSF Package Analysis project identified 'sap-addauthitemform' @ 0.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-7501 Malicious code in sap-added (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 690c89393c1cd2e1cb373bbeb5814983ffd3c010ffd6a154daf6c46828f46423 The OpenSSF Package Analysis project identified 'sap-added' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-addmeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e445a40c05a0f2f63ac2b84509337b45434fee07ea116448f1cba49012fa27aa The OpenSSF Package Analysis project identified 'sap-addmeta' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7492 Malicious code in sap-activation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8ede7025f37f71f86c3d2f05193b60a291c6ab41c478fc2b90719134ada73cfe The OpenSSF Package Analysis project identified 'sap-activation' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7495 Malicious code in sap-activkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5bcf3290f8461ce6ff5c8a8ebc248fd690b03bcb7506c7387a878e6b59c0e34a The OpenSSF Package Analysis project identified 'sap-activkey' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7498 Malicious code in sap-add (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85f549efd6de238e8a117fb3cf7a8b574d3d7ea9cbcf639e22eef77987d7364a The OpenSSF Package Analysis project identified 'sap-add' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in sap-activity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3e0a5149544b867f2487852926e46eba534638de827b17055beda04b632dbe63 The OpenSSF Package Analysis project identified 'sap-activity' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-actionfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1ddc8179af4dd85a502b57776b8f45e5e370057c128851a174d17f16288db2de The OpenSSF Package Analysis project identified 'sap-actionfile' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7489 Malicious code in sap-actionfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1ddc8179af4dd85a502b57776b8f45e5e370057c128851a174d17f16288db2de The OpenSSF Package Analysis project identified 'sap-actionfile' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-action2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a7074778f420cd6e72cd47c261e9d9628b1b4257940eb2224ba02a924ed3706 The OpenSSF Package Analysis project identified 'sap-action2' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7488 Malicious code in sap-action2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a7074778f420cd6e72cd47c261e9d9628b1b4257940eb2224ba02a924ed3706 The OpenSSF Package Analysis project identified 'sap-action2' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in secnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a9e8a7599691831cd3f6a1111dfd17e5b50219d9eabcfffa1ff08edb10be6d8c The OpenSSF Package Analysis project identified 'secnav' @ 69.69.69 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7438 Malicious code in eslint-plugin-ally-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23310826a7310567370020e364d6dedeb87558d2ce0ffcf5bc6054d70951bf3c The OpenSSF Package Analysis project identified 'eslint-plugin-ally-rules' @ 1.0.5 npm as malicious. It is considered malicious because: - The...

Malicious code in job-specs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 33cc6191f6fbd8274e7eb5fe159654ded5d7fadbdc6fe26dbb62b26c0ddd42ed The OpenSSF Package Analysis project identified 'job-specs' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in aroly-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5559e3338ab9d433fec892063a5f0ec5ac1164490196c5a095bc2ffb723e6290 The OpenSSF Package Analysis project identified 'aroly-test' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...

CVE-2024-31316

In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-31316

In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-31316

In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

WordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerability

Subscriber+ Multiple Broken Access Control vulnerability discovered by Dave Jong Patchstack in WordPress Plugin User Activity Log Pro versions = 2.3.4...