CVE-2022-1625

The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding invitation codes, which could allow attackers to add invitation codes for bypassing the provided restrictions and to change plugin settings by tricking admin users into visitin...

Cross site request forgery (csrf)

The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding invitation codes, which could allow attackers to add invitation codes for bypassing the provided restrictions and to change plugin settings by tricking admin users into visitin...

Remote Code Execution (RCE)

sixfabtool is vulnerable to remote code execution. When the package is installed, it opens a malicious backdoor in the package allowing an attacker to inject and execute arbitrary codes and gain access to sensitive user information and digital currency keys as well as escalate privileges...

Remote Code Execution (RCE)

texercise is vulnerable to remote code execution. When the package is installed, it opens a malicious backdoor in the package allowing an attacker to inject and execute arbitrary codes and gain access to sensitive user information and digital currency keys as well as escalate privileges...

Arbitrary Code Execution

watools is vulnerable to arbitrary code execution. The vulnerability exists because of a code execution backdoor in all the versions of watools packages available in Pypi which allows an attacker to inject and execute malicious codes...

SUSE: Security Advisory (SUSE-SU-2022:2174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists in url format which allows an attacker to inject and execute arbitrary codes...

SUSE-SU-2022:2174-1 Security update for python39

This update for python39 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module bsc1198511. - Update to 3.9.13: - Core and Builtins - gh-92311: Fixed a bug where setting frame.flineno to jump over a list comprehension could misbehave or crash. - gh-92112: Fix...

Rogue cryptocurrency billboards go phishing for wallets

Billboards and digital real world advertising has raised many questions of privacy and anonymity in recent years. Until now, the primary concern has been mostly legal, yet potentially objectionable geolocation and user profiling. Bluetooth beacons work in tandem with geofenced billboards to send...

Can Business Cybersecurity Protection Outlay Offset Cybercrime Insurance?

What is cybercrime insurance? Business cybersecurity protection cybercrime insurance safeguards organizations from any financial losses relating to damage to or loss of information from, networks and IT systems. This may include reputation loss, the cost of business interruption, infringement of...

MAL-2022-3655 Malicious code in holvi-message-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 128f00c52bdb7c2ff81548cb45e150d0944943e3546de0973afc8ed2189b9b65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in holvi-message-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 128f00c52bdb7c2ff81548cb45e150d0944943e3546de0973afc8ed2189b9b65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1588 Malicious code in bitcore-payment-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa0ec63e3e51f3e4f619b36b2eff6deb717e85cc3248f1514efd778ef4a1001c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitcore-payment-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa0ec63e3e51f3e4f619b36b2eff6deb717e85cc3248f1514efd778ef4a1001c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-communication-short-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad417280ef4532bb13dcd8b872c21eb8f24ce90800433fdfcd1f15e11519741c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-robux-codes-freerobuxgenertorcodes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81a0d61d7c8d9d1c17fb995f2556ee23c8164bfbf1cd8824f2783bed554c2fe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3192 Malicious code in free-robux-codes-freerobuxgenertorcodes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81a0d61d7c8d9d1c17fb995f2556ee23c8164bfbf1cd8824f2783bed554c2fe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-robux-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3f4d53cb5f03a5b91451c3cd9232fdc4d55107885697e973e6b3fffc606d93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3191 Malicious code in free-robux-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3f4d53cb5f03a5b91451c3cd9232fdc4d55107885697e973e6b3fffc606d93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-rocket-league-codes-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 431322dc12efb1d6f334ef50376e028b11cd1c48df5be1f6bb4b5d11290f64ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...