3558 matches found
MAL-2022-2500 Malicious code in discord.js-beta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41ff73fb3183f69a72984a800fd1acb09d2a242b539d96f17ef1b398885cf1c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2012 Malicious code in colors-beta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36ae9b59011439265f622f08d6873bd4dfa0eb2c1da65f0ab540d273346d1f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in colors-beta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36ae9b59011439265f622f08d6873bd4dfa0eb2c1da65f0ab540d273346d1f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1388 Malicious code in azure-template-samples-ts-beta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b10d6fbf59581245f9918f3edb36dbc7879dee46d5b4d15555e411f29da0cf76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-arm-dnsresolver-samples-ts-beta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a616354b1b2aac64d8b3bc18582cb0c0ed41bc7f2db436598b320afcab1b6aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-arm-dnsresolver-samples-js-beta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bb9f7982e1b5b7a8cf2ecd8a6a62a8b372d80d1e0d2cddfdd9f99038c29befb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1261 Malicious code in azure-arm-mobilenetwork-samples-js-beta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1835cdc00e29dec5a3b51f5da1d340fc8cacc3e53602f970c4a02881ba125a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1237 Malicious code in azure-arm-containerregistry-samples-js-beta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3bc278f7453c5e3fcd0ef73ed4014c2d04941b6b4ac6e7d304280f2c9dee23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-arm-servicemap-samples-ts-beta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 879b0fdb17c1119e579e5f7d71290575b29a45995616e170b1d21d8d316d5b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Design/Logic Flaw
Discourse is an open-source discussion platform. Prior to version 2.8.4 in the stable branch and version 2.9.0.beta5 in the beta and tests-passed branches, banner topic data is exposed on login-required sites. This issue is patched in version 2.8.4 in the stable branch and version 2.9.0.beta5 in...
CVE-2022-24077
CVE-2022-24077 affects Naver Cloud Explorer Beta. Vulnerability arises from malicious DLL injection enabling an attacker to execute arbitrary code with SYSTEM privileges. The description across sources confirms local-priority abuse with high impact (complete confidentiality, integrity, and availa...
Electron 安全漏洞
Electron is a personal developer of a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium and can be used to write cross-platform desktop applications using HTML and CSS. A security vulnerability exists in Electron version...
CVE-2022-24077: Improper Privilege Management
Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection...
PT-2022-20469
Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2.8.4 on the stable branch Discourse versions prior to 2.9.0beta5 on the beta and tests-passed branches Description The issue affects Discourse, an open source platform for community discussion. Inviting users on...
CVE-2022-29232 Exposure of messages in BigBlueButton public chats
BigBlueButton is an open source web conferencing system. Starting with version 2.2 and prior to versions 2.3.9 and 2.4-beta-1, an attacker can circumvent access controls to obtain the content of public chat messages from different meetings on the server. The attacker must be a participant in a...
CVE-2022-29169 ReDoS on endpoint html5client/useragent in BigBlueButton
BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expression denial of service ReDoS attacks. By using specific a RegularExpression, an attacker can cause denial of service for the bbb-html5...
GHSA-F7FF-XF87-F22Q Arbitrary command execution in Minidoc
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file...
Arbitrary command execution in Minidoc
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file...
