MAL-2022-978 Malicious code in amplify-codegen-e2e-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78ef98fa45356b629d8b18e241e11d0b1aaa3f8b0bd38d3a357fc6707c297ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amplify-codegen-e2e-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78ef98fa45356b629d8b18e241e11d0b1aaa3f8b0bd38d3a357fc6707c297ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in geoadv-proptypes-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86aa62f8baa2d8ed0fda95fc5065b753603886dd1331dfa3532b70d30be8ee11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in geoadv-ts-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c47caa11253203c249aa0ca38da1140e5ef612bc4d17f527da8642a3244108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3344 Malicious code in geoadv-ts-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c47caa11253203c249aa0ca38da1140e5ef612bc4d17f527da8642a3244108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3343 Malicious code in geoadv-proptypes-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86aa62f8baa2d8ed0fda95fc5065b753603886dd1331dfa3532b70d30be8ee11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5644 Malicious code in react-dts-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53dbff286a2669baf7872c7b3c62ef478e1e1d1a7f1f332b67a6227ec0220bb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-dts-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53dbff286a2669baf7872c7b3c62ef478e1e1d1a7f1f332b67a6227ec0220bb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-FV3M-XHQW-9M79 ballcat-codegen template engine remote code execution injection

Impact Ballcat Codegen provides the function of online editing code to generate templates. In version 1.0.0.beta.2, since Velocity and freemarker templates are introduced but input verification is not done, attackers can implement remote code execution through malicious code injection of the...

ballcat-codegen template engine remote code execution injection

Impact Ballcat Codegen provides the function of online editing code to generate templates. In version 1.0.0.beta.2, since Velocity and freemarker templates are introduced but input verification is not done, attackers can implement remote code execution through malicious code injection of the...

CVE-2022-24881

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...

Code injection

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...

CVE-2022-24881 Command Injection in Ballcat Codegen

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...

CVE-2022-24881 Command Injection in Ballcat Codegen

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...

CVE-2022-24881

CVE-2022-24881 concerns Ballcat Codegen. Affected versions prior to 1.0.0.beta.2 allow remote code execution via malicious code injection in the template engine, caused by using Velocity and Freemarker templates without proper input verification. The issue is fixed in 1.0.0.beta.2. Public sources...

CVE-2022-24881 Command Injection in Ballcat Codegen

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...

CVE-2022-24881

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...

CVE-2022-24881: Improper Control of Generation of Code

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...

Ballcat Codegen 输入验证错误漏洞

BallCat Codegen is a code generator for BallCat. A security vulnerability exists in Ballcat Codegen that allows an attacker to achieve remote code execution via malicious code injection from the template engine. This occurs due to the introduction of Velocity and freemarker templates without...

PT-2022-16954

Name of the Vulnerable Software and Affected Versions Ballcat Codegen versions prior to 1.0.0.beta.2 Description Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious...