Arbitrary Code Execution

watools is vulnerable to arbitrary code execution. The vulnerability exists because of a code execution backdoor in all the versions of watools packages available in Pypi which allows an attacker to inject and execute malicious codes...

PT-2022-14010

Name of the Vulnerable Software and Affected Versions New User Approve WordPress plugin versions prior to 2.4 Description The issue concerns the lack of a CSRF check when updating settings and adding invitation codes. This could allow attackers to add invitation codes for bypassing restrictions a...

CVE-2022-1625: Cross-Site Request Forgery (CSRF)

The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding invitation codes, which could allow attackers to add invitation codes for bypassing the provided restrictions and to change plugin settings by tricking admin users into visitin...

SUSE: Security Advisory (SUSE-SU-2022:2174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists in url format which allows an attacker to inject and execute arbitrary codes...

PT-2022-4990

Name of the Vulnerable Software and Affected Versions cURL versions prior to 7.85.0 Description The issue is related to insufficient input validation when handling cookies with control codes, specifically byte values less than 32. This can be exploited by a remote attacker to cause a denial of...

SUSE-SU-2022:2174-1 Security update for python39

This update for python39 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module bsc1198511. - Update to 3.9.13: - Core and Builtins - gh-92311: Fixed a bug where setting frame.flineno to jump over a list comprehension could misbehave or crash. - gh-92112: Fix...

Rogue cryptocurrency billboards go phishing for wallets

Billboards and digital real world advertising has raised many questions of privacy and anonymity in recent years. Until now, the primary concern has been mostly legal, yet potentially objectionable geolocation and user profiling. Bluetooth beacons work in tandem with geofenced billboards to send...

Can Business Cybersecurity Protection Outlay Offset Cybercrime Insurance?

What is cybercrime insurance? Business cybersecurity protection cybercrime insurance safeguards organizations from any financial losses relating to damage to or loss of information from, networks and IT systems. This may include reputation loss, the cost of business interruption, infringement of...

Malicious code in holvi-message-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 128f00c52bdb7c2ff81548cb45e150d0944943e3546de0973afc8ed2189b9b65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3655 Malicious code in holvi-message-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 128f00c52bdb7c2ff81548cb45e150d0944943e3546de0973afc8ed2189b9b65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitcore-payment-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa0ec63e3e51f3e4f619b36b2eff6deb717e85cc3248f1514efd778ef4a1001c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1588 Malicious code in bitcore-payment-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa0ec63e3e51f3e4f619b36b2eff6deb717e85cc3248f1514efd778ef4a1001c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-communication-short-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad417280ef4532bb13dcd8b872c21eb8f24ce90800433fdfcd1f15e11519741c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-robux-codes-freerobuxgenertorcodes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81a0d61d7c8d9d1c17fb995f2556ee23c8164bfbf1cd8824f2783bed554c2fe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3192 Malicious code in free-robux-codes-freerobuxgenertorcodes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81a0d61d7c8d9d1c17fb995f2556ee23c8164bfbf1cd8824f2783bed554c2fe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-robux-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3f4d53cb5f03a5b91451c3cd9232fdc4d55107885697e973e6b3fffc606d93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3191 Malicious code in free-robux-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3f4d53cb5f03a5b91451c3cd9232fdc4d55107885697e973e6b3fffc606d93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-rocket-league-codes-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 431322dc12efb1d6f334ef50376e028b11cd1c48df5be1f6bb4b5d11290f64ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3198 Malicious code in free-rocket-league-codes-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 431322dc12efb1d6f334ef50376e028b11cd1c48df5be1f6bb4b5d11290f64ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...