MAL-2023-351 Malicious code in fc-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c7ff6c5579b1a0d46ad0e9f00fa9dc937a36959d52898b7bdc9fedf4a645643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-338 Malicious code in fc-cookie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b548ad4e233914b6c26e1f1359281f882c9841c6814bb8dae7e2a46b44e04f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

mh4x4.at Cross Site Scripting vulnerability OBB-3381016

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-29724

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with...

vinothek1.at Cross Site Scripting vulnerability OBB-3372815

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-38 Malicious code in @leanmull/ldb-decryptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d4e66532be866fa2974fbd1653c75fa4bec095ad78503c70b153fb75c8445a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-25467

CVE-2023-25467 concerns a CSRF vulnerability in the WordPress plugin Resize at Upload Plus, affecting versions ≤ 1.3. The root cause is a Cross-Site Request Forgery condition that can be triggered by an unauthenticated attacker, potentially compromising actions within the vulnerable plugin. Publi...

CVE-2023-25467 WordPress Resize at Upload Plus Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Daniel Mores, A. Huizinga Resize at Upload Plus plugin = 1.3 versions...

PT-2023-20085 · WordPress · Resize At Upload Plus

Name of the Vulnerable Software and Affected Versions: Resize at Upload Plus plugin versions 1.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

WordPress plugin Resize at Upload Plus 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

j.oe24.at Cross Site Scripting vulnerability OBB-3357428

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

xperttactical.com Cross Site Scripting vulnerability OBB-3334244

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-1001 Malicious code in you-are-a-badass-at-making-money-master-the-mindset-of-wealth-by-jen-sincero-on-mac-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5634aadf214a3bea5b6bd447159f6599ce4b0f4ce9328869bf8cabeeb595f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-729 Malicious code in react-ob1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a109565fb7408913332a6480b54b10415a8287a3bb3ee6c8216a89ce0d25cd6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-103 Malicious code in apitelegram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea07ce89558075f0ae14ec35b104be366b715ccc70f4308cf8a6d8ec4e193638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

u-blox TOBY-L2 操作系统命令注入漏洞

The u-blox TOBY-L2 is a multimode LTE Cat 4 module with HSPA+ and/or 2G fallback from u-blox. The u-blox TOBY-L2 suffers from an operating system command injection vulnerability that originates from a flaw in input validation, which allows a user to execute arbitrary operating system commands usi...

MAL-2023-1007 Malicious code in zebilamouche (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e40ab7411da6bec58baf070991f0cfc47b4d1b87ba7bdf784b31aa130a118d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-617 Malicious code in neat_clean (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1afebf6a78e549208f1afb7e628144ad3ea178a57f5062542af37c5816330b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

mh4x4.at Cross Site Scripting vulnerability OBB-3245495

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-845 Malicious code in tdv2-service-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4717bc8c34854233c77434f3a33ad98f6e14140713eadbdd2bb539be09193daa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...