inews3.com Cross Site Scripting vulnerability OBB-2659691

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in blockchain-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423a0ba535c3f0be06ca7a468ee067e4200efd1441cb10051988d40808efd54c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1612 Malicious code in blockchain-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423a0ba535c3f0be06ca7a468ee067e4200efd1441cb10051988d40808efd54c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.thomsonreuters.project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b235ce62bef8209d9b2187043ab158273707b9e8ee14216e493cf5dd30fa5bd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2065 Malicious code in com.unity.ide.vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 416753a6cbd610d25709fb4492bbc5bd5b1b083e6aa740bd60884c08f94e39c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dev.socrata.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65703102d55c148a01e94efc3d9bd558de95853e7f7ee88b22eaf7784b9a65cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5403 Malicious code in polaris-shopify-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a5e8b3737a432554b0cb2bca6b65c444835689b711931cd76872db903f5817a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

bog8.com Cross Site Scripting vulnerability OBB-2658101

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

becas123.com Cross Site Scripting vulnerability OBB-2656509

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-2251 Malicious code in crypto-com-chain-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 437033f64c41a907ed403850561929fa9e944f2b536a5087c92a76a6bfec6a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

inews365.com Cross Site Scripting vulnerability OBB-2654804

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-9RG7-3J4F-CF4X QueryInterface should call AddRef before returning pointer

Affected version of this crate, which is a required dependency in com-impl, provides a faulty implementation of the IUnknown::QueryInterface method. QueryInterface implementation must call IUnknown::AddRef before returning the pointer, as describe in this documentation: As it is not incrementing...

audir (=0.1.0), com-impl (>=0.1.0 <=0.1.1) +6 more potentially affected by CVE-2021-45681 via derive-com-impl (=0.1.1)

derive-com-impl CARGO version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on derive-com-impl and may be impacted: - audir =0.1.0 - com-impl =0.1.0, =0.3.0-alpha1, =0.3.0-alpha1, =0.3.0-alpha4 - dxgi =0.3.0-alpha4 - wic =0.3.0-alpha1 Source cves...

dhakatimes24.com Cross Site Scripting vulnerability OBB-2652983

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

novo411.com Cross Site Scripting vulnerability OBB-2652759

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

church100.com Cross Site Scripting vulnerability OBB-2652343

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cang888.com Cross Site Scripting vulnerability OBB-2652203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

zone131.com Cross Site Scripting vulnerability OBB-2651358

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vidoz8.com Cross Site Scripting vulnerability OBB-2651137

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kmn24.com Cross Site Scripting vulnerability OBB-2650612

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...