Malicious code in @zitterorg/cupiditate-fugiat-culpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 505aa19c407d211fbbff5a2b9e252641bc3dac0ed45bb8c4a67cc3baebbd2a60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/ullam-veniam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05981a78c3f01e0e4631397b06b32a0165ba36061bd3098a8d08fec8e03c2a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Sharp Multi-Function Printer 18 Vulnerabilities

Hello, Please find a text-only version below sent to security mailing lists. The complete version on "17 vulnerabilities in Sharp Multi-Function Printers" is posted here: https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html The text version is also posted here:...

South Korean ERP Vendor's Server Hacked to Spread Xctdoor Malware

An unnamed South Korean enterprise resource planning ERP vendor's product update server has been found to be compromised to deliver a Go-based backdoor dubbed Xctdoor. The AhnLab Security Intelligence Center ASEC, which identified the attack in May 2024, did not attribute it to a known threat act...

WordPress Logic Hop Plugin <= 3.8.8 is vulnerable to Backdoor

Software Logic Hop Type Plugin Vulnerable versions = 3.8.8 Fixed in 3.9.0 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID e54343bdaeda Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Weight Tracker Plugin <= 10.9.1 is vulnerable to Backdoor

Software Weight Tracker Type Plugin Vulnerable versions = 10.9.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 6e0abdbba268 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Qualified Electronic Signatures by eID Easy Plugin <= 3.3.0 is vulnerable to Backdoor

Software Qualified Electronic Signatures by eID Easy Type Plugin Vulnerable versions = 3.3.0 Fixed in 3.3.1 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7c90ad9b98a6 Credits Sansec.io Required privilege...

WordPress Ideaplus Plugin <= 1.0.5 is vulnerable to Backdoor

Software Ideaplus Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID ec824eebab48 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Integration for Luminate and Gravity Forms Plugin <= 1.3.3 is vulnerable to Backdoor

Software Integration for Luminate and Gravity Forms Type Plugin Vulnerable versions = 1.3.3 Fixed in 1.3.4 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0d71ccb64282 Credits Sansec.io Required privilege...

WordPress Field Day Plugin <= 3.3.8 is vulnerable to Backdoor

Software Field Day Type Plugin Vulnerable versions = 3.3.8 Fixed in 3.4.0 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 00638b889259 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress weForms Plugin <= 1.6.23 is vulnerable to Backdoor

Software weForms Type Plugin Vulnerable versions = 1.6.23 Fixed in 1.6.24 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 83328c8ce30e Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress TotalRating Pro Plugin <= 1.8.4 is vulnerable to Backdoor

Software TotalRating Pro Type Plugin Vulnerable versions = 1.8.4 Fixed in 1.8.5 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 63434ea7cd48 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 20...

WordPress TotalSurvey Plugin <= 1.9.3 is vulnerable to Backdoor

Software TotalSurvey Type Plugin Vulnerable versions = 1.9.3 Fixed in 1.10.0 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5517de617966 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Alfred Easy Shipping Plugin <= 1.0.5 is vulnerable to Backdoor

Software Alfred Easy Shipping Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c071f3d22627 Credits Sansec.io Required privilege Unauthenticated Published 3 July,...

WordPress OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) Plugin <= 1.1.2 is vulnerable to Backdoor

Software OpenStreetMap for Gutenberg and WPBakery Page Builder formerly Visual Composer Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 2c4a57caa5d5 Credits...

WordPress Pixel Manager for WooCommerce Plugin <= 1.43.3 is vulnerable to Backdoor

Software Pixel Manager for WooCommerce Type Plugin Vulnerable versions = 1.43.3 Fixed in 1.43.4 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer SweetCode PSID 3a6235394517 Credits Sansec.io Required privilege Unauthenticated Published ...

WordPress wp-code-highlightjs Plugin <= 0.6.3 is vulnerable to Backdoor

Software wp-code-highlightjs Type Plugin Vulnerable versions = 0.6.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0f9d2e94e55a Credits Sansec.io Required privilege Unauthenticated Published 3 July,...

WordPress WP User Frontend Plugin <= 4.0.7 is vulnerable to Backdoor

Software WP User Frontend Type Plugin Vulnerable versions = 4.0.7 Fixed in 4.0.8 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b7d6d9c8134f Credits Sansec.io Required privilege Unauthenticated Published 3 July,...

WordPress Taager Plugin <= 1.16.0 is vulnerable to Backdoor

Software Taager Type Plugin Vulnerable versions = 1.16.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID d9d1b77af81a Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...

WordPress Meal Tracker Plugin <= 3.1.6 is vulnerable to Backdoor

Software Meal Tracker Type Plugin Vulnerable versions = 3.1.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID e250a3bed696 Credits Sansec.io Required privilege Unauthenticated Published 3 July, 2024...