ERPNext 跨站脚本漏洞

ERPNext is an open source enterprise resource planning solution from ERPNext India. A cross-site scripting vulnerability exists in ERPNext versions v13.0.0-beta.13 through v13.30.0, which can be exploited by an attacker to conduct an account takeover attack with a low-privileged user...

Malicious code in @tekion/beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25635e252b9808c78842badaf5878dca711e8678777c82f2327a3561c58a7d7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-627 Malicious code in @tekion/beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25635e252b9808c78842badaf5878dca711e8678777c82f2327a3561c58a7d7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4870 Malicious code in noblox.js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 332a81ed84651ca22b9a949cc938519334d55fc1b9a8fce6a5b123de2098ef96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noblox.js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 332a81ed84651ca22b9a949cc938519334d55fc1b9a8fce6a5b123de2098ef96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41ff73fb3183f69a72984a800fd1acb09d2a242b539d96f17ef1b398885cf1c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2500 Malicious code in discord.js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41ff73fb3183f69a72984a800fd1acb09d2a242b539d96f17ef1b398885cf1c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2012 Malicious code in colors-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36ae9b59011439265f622f08d6873bd4dfa0eb2c1da65f0ab540d273346d1f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36ae9b59011439265f622f08d6873bd4dfa0eb2c1da65f0ab540d273346d1f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1388 Malicious code in azure-template-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b10d6fbf59581245f9918f3edb36dbc7879dee46d5b4d15555e411f29da0cf76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-dnsresolver-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bb9f7982e1b5b7a8cf2ecd8a6a62a8b372d80d1e0d2cddfdd9f99038c29befb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-dnsresolver-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a616354b1b2aac64d8b3bc18582cb0c0ed41bc7f2db436598b320afcab1b6aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1261 Malicious code in azure-arm-mobilenetwork-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1835cdc00e29dec5a3b51f5da1d340fc8cacc3e53602f970c4a02881ba125a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1237 Malicious code in azure-arm-containerregistry-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3bc278f7453c5e3fcd0ef73ed4014c2d04941b6b4ac6e7d304280f2c9dee23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-servicemap-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 879b0fdb17c1119e579e5f7d71290575b29a45995616e170b1d21d8d316d5b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

Discourse is an open-source discussion platform. Prior to version 2.8.4 in the stable branch and version 2.9.0.beta5 in the beta and tests-passed branches, banner topic data is exposed on login-required sites. This issue is patched in version 2.8.4 in the stable branch and version 2.9.0.beta5 in...

CVE-2022-24077

CVE-2022-24077 affects Naver Cloud Explorer Beta. Vulnerability arises from malicious DLL injection enabling an attacker to execute arbitrary code with SYSTEM privileges. The description across sources confirms local-priority abuse with high impact (complete confidentiality, integrity, and availa...

Electron 安全漏洞

Electron is a personal developer of a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium and can be used to write cross-platform desktop applications using HTML and CSS. A security vulnerability exists in Electron version...

PT-2022-20469

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2.8.4 on the stable branch Discourse versions prior to 2.9.0beta5 on the beta and tests-passed branches Description The issue affects Discourse, an open source platform for community discussion. Inviting users on...

CVE-2022-29232 Exposure of messages in BigBlueButton public chats

BigBlueButton is an open source web conferencing system. Starting with version 2.2 and prior to versions 2.3.9 and 2.4-beta-1, an attacker can circumvent access controls to obtain the content of public chat messages from different meetings on the server. The attacker must be a participant in a...