Malicious code in fbdebug (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2edf3045263e059e2b1599655b25cc167abecc4d1e77e5e7e8d62998b0fd9e18 The OpenSSF Package Analysis project identified 'fbdebug' @ 0.1 pypi as malicious. It is considered malicious because: - The package communicate...

MAL-2023-8395 Malicious code in billing.api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 507cfdb034cfdde119a280e16b6ad66952ff26fd821fd25ec866bf04f29398f1 The OpenSSF Package Analysis project identified 'billing.api' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in npm-research-enum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32f39024ba535c374e98c41355c2663f4ae5a92ff25df3c0f8cc60837ec06d56 The OpenSSF Package Analysis project identified 'npm-research-enum' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8394 Malicious code in npm-research-enum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32f39024ba535c374e98c41355c2663f4ae5a92ff25df3c0f8cc60837ec06d56 The OpenSSF Package Analysis project identified 'npm-research-enum' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Moodle < 3.9.24, 3.11.x < 3.11.17, 4.0.x < 4.0.11, 4.1.x < 4.1.6, 4.2.x < 4.2.3 Multiple Vulnerabilities

Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...

MAL-2023-8391 Malicious code in @banana-cake-pop/data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62a20ff9ddb55a8de5c7bffe9455b25f0fca2223207e80cf7b9d7993bd02db12 The OpenSSF Package Analysis project identified '@banana-cake-pop/data' @ 1.9.10 npm as malicious. It is considered malicious because: - The...

MAL-2023-8389 Malicious code in @rappiinc/partner-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1077f54b61ad7f744086cdd8c1d66f8d3d7dd074ed0a585b608b4734d3a6f25e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-22077

creationtimestamp| type| source ---|---|--- 2023-10-18 02:44:53+00:00| seen| https://t.me/cibsecurity/72472 2025-08-06 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvr4oammir25...

Warning: Unpatched Cisco Zero-Day Vulnerability Actively Targeted in the Wild

Cisco has warned of a critical, unpatched security flaw impacting IOS XE software that's under active exploitation in the wild. Rooted in the web UI feature, the zero-day vulnerability is tracked as CVE-2023-20198 and has been assigned the maximum severity rating of 10.0 on the CVSS scoring syste...

CVE-2023-5167

The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks...

CVE-2023-5167

The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks...

Cross site scripting

The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks...

CVE-2023-5133 User Activity Log Pro < 2.3.4 - IP Spoofing

This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic...

CVE-2023-5133 User Activity Log Pro < 2.3.4 - IP Spoofing

This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic...

CVE-2023-5167 User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent

The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks...

CVE-2023-5167

CVE-2023-5167 affects WordPress plugin User Activity Log Pro

Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerabilities

Updates Nov. 02: Identified a third version of the BadCandy implant. Added expected response from the new version of the implant against one of the HTTP requests used to check for infected device. Nov. 1: Observed increase in exploitation attempts since the publication of the proofs-of-concept PO...

WordPress plugin User Activity Log Pro Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability in the WordPre...

Discord, I Want to Play a Game

Discord, I Want to Play a Game By Ernesto Fernández Provecho and David Pastor Sanz Threatray · October 16, 2023 Discord is the first choice for gamers when they want to chat with some friends while playing an online computer game. Moreover, it is also a major choice for users that simply want to...

WordPress plugin user-activity-log-pro security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability in the WordPress...