MAL-2024-1397 Malicious code in reqwestss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b49654324e091538657038a1288d05e2879c02d73bec38baeae681b0a26f5b9 The OpenSSF Package Analysis project identified 'reqwestss' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1395 Malicious code in pinyin-pra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b8720c87d902e268ccf6e9db13f00285998cf35b280a6851ef9c3c23b3f0d6b The OpenSSF Package Analysis project identified 'pinyin-pra' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

PT-2024-25633 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to...

MAL-2024-1393 Malicious code in nespresso-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4df4d16cd100a965fef42c58150e9688849a5acfa8de2f809b3ed66f5ef9f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nespresso-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4df4d16cd100a965fef42c58150e9688849a5acfa8de2f809b3ed66f5ef9f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flexfone-reseller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 18122a6d33435c1fb53b974e49237f471236504fef75bb09e9f0fb41c399a463 The OpenSSF Package Analysis project identified 'flexfone-reseller' @ 100.0.5 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-1391 Malicious code in flexfone-reseller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 18122a6d33435c1fb53b974e49237f471236504fef75bb09e9f0fb41c399a463 The OpenSSF Package Analysis project identified 'flexfone-reseller' @ 100.0.5 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-1389 Malicious code in seller-journey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 60c8dd60bc988a9407b04ce22918c8e8aedc6a7436ea2c74eb3181de1ad876bf The OpenSSF Package Analysis project identified 'seller-journey' @ 5.4.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1388 Malicious code in controlbundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db9a250abd3db6888ce6c77c0308a1e67927ee02b972e1516c7fdf295f33e522 The OpenSSF Package Analysis project identified 'controlbundler' @ 1.0.6 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1387 Malicious code in sanar-website-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5343e64c2316fbb0e3c6256f74b5b0da7993903262ed71f836a93f2e929ced78 The OpenSSF Package Analysis project identified 'sanar-website-v3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1386 Malicious code in tec-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 125ddb22e15354e2319586116faa892343d4a86c8f79c9d6ed274d9acfb5f20d The OpenSSF Package Analysis project identified 'tec-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-5372

A vulnerability classified as problematic was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file submitextracurricularactivity.php. The manipulation of the argument activitycontact leads to cross site scripting. The attack can be initiated...

CVE-2024-5372 Kashipara College Management System submit_extracurricular_activity.php cross site scripting

A vulnerability classified as problematic was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file submitextracurricularactivity.php. The manipulation of the argument activitycontact leads to cross site scripting. The attack can be initiated...

PT-2024-35827 · Unknown · Kashipara College Management System

Name of the Vulnerable Software and Affected Versions: Kashipara College Management System version 1.0 Description: A problematic issue was found in the submit extracurricular activity.php file, where the manipulation of the activity contact argument leads to cross-site scripting. The attack can ...

College Management System 跨站脚本漏洞

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to college. A cross-site scripting vulnerability exists in Kashipara College Management System version 1.0, which stems from the...

Cyber Signals: Inside the growing risk of gift card fraud

In the ever-evolving landscape of cyberthreats, staying ahead of malicious actors is a constant challenge. Microsoft Threat Intelligence has observed that gift cards are attractive targets for fraud and social engineering practices. Unlike credit or debit cards, there’s no customer name or bank...

Rockwell Advises Disconnecting Internet-Facing ICS Devices Amid Cyber Threats

Rockwell Automation is urging its customers to disconnect all industrial control systems ICSs not meant to be connected to the public-facing internet to mitigate unauthorized or malicious cyber activity. The company said it's issuing the advisory due to "heightened geopolitical tensions and...

SUSE CVE-2024-35855

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The rule activity update delayed work periodically traverses the list of configured rules and queries their activity from the device. As part of this task...

DEBIAN-CVE-2024-35855

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The rule activity update delayed work periodically traverses the list of configured rules and queries their activity from the device. As part of this task...

UBUNTU-CVE-2024-35855

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The rule activity update delayed work periodically traverses the list of configured rules and queries their activity from the device. As part of this task...