Malicious code in market-apps-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bfa827521d2bb23dfbb0667f88a9b5fe6e0bda6562d84d49943f5f7c0c84611 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-36647

A vulnerability classified as critical has been found in YunoHost-Apps transmissionynh. Affected is an unknown function of the file conf/nginx.conf. The manipulation leads to path traversal. The patch is identified as f136dfd44eda128129e5fd2d850a3a3c600e6a4a. It is recommended to apply a patch to...

CVE-2020-36647

A vulnerability classified as critical has been found in YunoHost-Apps transmissionynh. Affected is an unknown function of the file conf/nginx.conf. The manipulation leads to path traversal. The patch is identified as f136dfd44eda128129e5fd2d850a3a3c600e6a4a. It is recommended to apply a patch to...

Path traversal

A vulnerability classified as critical has been found in YunoHost-Apps transmissionynh. Affected is an unknown function of the file conf/nginx.conf. The manipulation leads to path traversal. The patch is identified as f136dfd44eda128129e5fd2d850a3a3c600e6a4a. It is recommended to apply a patch to...

CVE-2020-36647 YunoHost-Apps transmission_ynh nginx.conf path traversal

A vulnerability classified as critical has been found in YunoHost-Apps transmissionynh. Affected is an unknown function of the file conf/nginx.conf. The manipulation leads to path traversal. The patch is identified as f136dfd44eda128129e5fd2d850a3a3c600e6a4a. It is recommended to apply a patch to...

CVE-2020-36647

CVE-2020-36647 affects YunoHost-Apps transmission_ynh; an unknown function in conf/nginx.conf allows path traversal. Patch f136dfd44eda128129e5fd2d850a3a3c600e6a4a fixes this issue (VDB-217638). Apply the patch to remediate.

CVE-2020-36647: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as critical has been found in YunoHost-Apps transmissionynh. Affected is an unknown function of the file conf/nginx.conf. The manipulation leads to path traversal. The patch is identified as f136dfd44eda128129e5fd2d850a3a3c600e6a4a. It is recommended to apply a patch to...

Transmission for YunoHost path traversal vulnerability

Transmission for YunoHost is a YunoHost transmission package from the individual developers of YunoHost-Apps. A path traversal vulnerability exists in the YunoHost-Apps Transmission for YunoHost, which originates from an unknown function in the file conf/nginx.conf that is manipulated to cause pa...

PT-2023-11817 · Yunohost · Transmission Ynh

Name of the Vulnerable Software and Affected Versions: YunoHost-Apps transmission ynh affected versions not specified Description: A critical vulnerability has been found in YunoHost-Apps transmission ynh, affecting an unknown function of the file conf/nginx.conf. The manipulation leads to path...

New Malvertising Campaign via Google Ads Targets Users Searching for Popular Software

Users searching for popular software are being targeted by a new malvertising campaign that abuses Google Ads to serve trojanized variants that deploy malware, such as Raccoon Stealer and Vidar. The activity makes use of seemingly credible websites with typosquatted domain names that are surfaced...

Huawei Aslan-AL10 has a vulnerability in input validation.

Huawei Aslan-AL10 is a children's smartwatch from Huawei China. A security vulnerability exists in Huawei Aslan-AL10, which stems from an improper input validation vulnerability that could lead to abnormal watch application services...

CVE-2022-3840

The Login for Google Apps WordPress plugin before 3.4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3840

The Login for Google Apps WordPress plugin before 3.4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Cross site scripting

The Login for Google Apps WordPress plugin before 3.4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3840 Google Apps Login < 3.4.5 - Admin+ Stored XSS

The Login for Google Apps WordPress plugin before 3.4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3840 Google Apps Login < 3.4.5 - Admin+ Stored XSS

The Login for Google Apps WordPress plugin before 3.4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3840

CVE-2022-3840 affects the WordPress plugin Login for Google Apps prior to 3.4.5. The vulnerability arises because the plugin does not sufficiently sanitise/escape certain settings, enabling Stored XSS by high-privilege users (e.g., admins), even when unfiltered_html is disallowed (notably in mult...

PT-2022-24407 · WordPress · Login For Google Apps

Name of the Vulnerable Software and Affected Versions: Login for Google Apps WordPress plugin versions prior to 3.4.5 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for...

WordPress Plugin Google Apps Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2022-3840: Undefined Security Weakness

The Login for Google Apps WordPress plugin before 3.4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...