15848 matches found
MAL-2024-1287 Malicious code in ecs-cdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 308d5a6fa5eb0973b0ff8290c321ac60685b686f42543a7a09b16a5fe56a7457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in discord-caches (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c46cf6695c1ee706d7c20760d479bc271d109c548485e896885c9f7b6d704928 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1286 Malicious code in djs-status (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63cea4fbbb1333188e78d11622c9b943608aea6770144dacf6e1184036a646b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in djs-embeds-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86831222f9b0a818e862c2db4a2e7f56259e7bae31f417c9464d2c19cb67dadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1285 Malicious code in djs-embeds-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86831222f9b0a818e862c2db4a2e7f56259e7bae31f417c9464d2c19cb67dadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1290 Malicious code in samplenodejsservice (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d2e2f79b4c5000c976cd4c1e99d091bb46b7dbee831bff50b3c69ff36e7dbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1288 Malicious code in lambda-iss-location (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d7bd1b87c4b816789f583c6667d202f613eab5d352c1fcbe90fe1b182a0d13c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1294 Malicious code in tari-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6da5a4c9da80939fd8b4009200d8e59514e1d3a5664d9b7150b27f40250a584d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1282 Malicious code in blockchain-explorer-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdabf6ac5434305cb152ee0eaf4d9cbac6f1de324ae91052537dc8fcfa94410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Computer Laboratory Management System 安全漏洞
Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Computer Laboratory Management System v1.0, which originates from a SQL injection vulnerability in the parameter id of the component /admin/...
CVE-2024-31545
CVE-2024-31545 affects Computer Laboratory Management System v1.0 and is caused by a vulnerable SQL path in the admin interface: the endpoint "/admin/?page=user/manage_user&id=6" can be exploited via the id parameter to perform SQL Injection. The CVSS 3.1 base score is 9.4 (CRITICAL) with network...
CVE-2024-31545
Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manageuser&id=6...
CVE-2024-31545
Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manageuser&id=6...
CVE-2024-31546
Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/viewdamage.php...
CVE-2024-31547
Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/viewitem.php...
Malicious code in djs-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3dcc117202e21ae1b180b5f80af9dc0a1c0082aee807792f2aeb5b62c8e647d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-31547
Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/viewitem.php...
CVE-2024-31546
Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/viewdamage.php...
CVE-2024-31547
Computer Laboratory Management System v1.0 is affected by a SQL Injection in the id parameter of /admin/item/view_item.php. The vulnerability arises in the application’s input handling for that endpoint, enabling an attacker to manipulate a SQL query and potentially exfiltrate data or impact inte...