MAL-2023-8745 Malicious code in @pkg-m/m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a729a302e12ce9d988b8cd980f21cbf38d7e40262fdc86d5d7a0bbc7427e5635 The OpenSSF Package Analysis project identified '@pkg-m/m' @ 1.3.9 npm as malicious. It is considered malicious because: - The package...

CVE-2023-51102

creationtimestamp| type| source ---|---|--- 2023-12-26 19:27:17+00:00| seen| https://t.me/ctinow/159413 2023-12-30 08:16:20+00:00| seen| https://t.me/ctinow/160790...

CVE-2023-51098

creationtimestamp| type| source ---|---|--- 2023-12-26 19:27:13+00:00| seen| https://t.me/ctinow/159409 2023-12-30 08:16:24+00:00| seen| https://t.me/ctinow/160794...

MAL-2023-8744 Malicious code in formated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 469915f0cc096d71a5ad3349a9e1203ffbdbd158fcb529c064aca57d2dce22e8 The OpenSSF Package Analysis project identified 'formated' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...

OpenCRX Cross-site Scripting vulnerability

openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...

GHSA-8WJX-P2F8-5RJP OpenCRX Cross-site Scripting vulnerability

openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...

Malicious code in finalact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 65ae4f51ac0f42175a709c00e1fa248d12861a7d64bd828cfce2ab35f6a6c106 The OpenSSF Package Analysis project identified 'finalact' @ 1.1.3 npm as malicious. It is considered malicious because: - The package...

CVE-2023-27150

openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...

CVE-2023-27150

openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...

Cross site scripting

openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...

CVE-2023-27150

openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...

CVE-2023-27150

openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...

CVE-2023-27150

OpenCRX 5.2.0 has a cross-site scripting (XSS) vulnerability in the Name field when creating a Tracker in Manage Activity. Root cause: input in the Name field is not properly sanitized, enabling script execution. Impact: potential client-side script execution affecting users of affected deploymen...

CVE-2023-27150

openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...

MAL-2023-8769 Malicious code in richcolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 50d5904bd379a75fd43115d7339df3d79f87ec691026774160b15b8632a9f8ae Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

CVE-2023-27151

openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number in the Saved Search Activity via the Name, Description, or Activity Number field...

PT-2023-20976 · Opencrx · Opencrx

Name of the Vulnerable Software and Affected Versions: openCRX version 5.2.0 Description: A cross-site scripting XSS issue was discovered in openCRX, which occurs via the Name field after creating a Tracker in Manage Activity. This allows for potential malicious script execution. Recommendations:...

CVE-2023-27151

CVE-2023-27151 affects openCRX 5.2.0, where an HTML injection vulnerability exists in the Saved Search Activity’s Search Criteria - specifically via the Name, Description, or Activity Number fields. The cited sources describe a vulnerability in the OpenCRX application and note an HTML injection t...

CVE-2023-7092

creationtimestamp| type| source ---|---|--- 2023-12-24 15:26:17+00:00| seen| https://t.me/ctinow/159036 2023-12-25 00:31:57+00:00| seen| https://t.me/ctinow/159104 2024-01-05 22:16:45+00:00| seen| https://t.me/ctinow/163740...

CVE-2023-45777

creationtimestamp| type| source ---|---|--- 2023-12-24 11:12:04+00:00| seen| https://t.me/ctinow/158995 2024-01-20 15:17:03+00:00| seen| https://t.me/ctinow/170641 2024-01-21 03:47:32+00:00| published-proof-of-concept| https://t.me/CNArsenal/1881...