MAL-2023-1046 Malicious code in json2stringfy (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2e42c4a993125bac35486d178cd7356e08471fc96b79862efed3c64ae4f1d7d6 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

CVE-2023-2661

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha...

CVE-2023-2661 SourceCodester Online Computer and Laptop Store Master.php sql injection

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha...

CVE-2023-2661

SourceCodester Online Computer and Laptop Store 1.0 is affected by CVE-2023-2661. The vulnerability resides in /classes/Master.php where manipulating the id parameter leads to an SQL injection. Exploitation can be remote, and public disclosures exist. Multiple sources (NVD CVSSv3.1 base 9.8; othe...

CVE-2023-2660

CVE-2023-2660 affects SourceCodester Online Computer and Laptop Store 1.0. A SQL injection vulnerability exists in the view_categories.php file via the c parameter, allowing remote attackers to manipulate the database. The issue’s impact is described as high confidentiality, integrity, and availa...

CVE-2023-2659

CVE-2023-2659 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability exists in the view_product.php file, where manipulating the id parameter leads to SQL injection. It is exploitable remotely, and the public exploit is known. Multiple connected sources confirm the issue a...

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack may be launched remotely...

CVE-2023-2658 SourceCodester Online Computer and Laptop Store products.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack may be launched remotely...

CVE-2023-2657

The CVE-2023-2657 entry concerns SourceCodester Online Computer and Laptop Store 1.0. The vulnerability is a cross-site scripting flaw in the file products.php triggered by manipulating the search argument, allowing remote exploitation. Affected functionality is unknown but centered on the produc...

MAL-2023-1006 Malicious code in zalando-tech-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93bcc871674553b866c3bc29c32b5fab13985f16987aab59fd1869d00d6b1359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Online Computer and Laptop Store 跨站脚本漏洞

Online Computer and Laptop Store is an online computer and laptop store by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from a problem in the file products.php, where manipulation of...

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from a problem in the file viewproduct.php, where manipulation of the...

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from a problem in the file products.php, where manipulation of the...

Malicious code in this-is-how-it-always-is-by-laurie-frankel-on-mac-new-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42d259e6e199af621ff25fc2fff9e560cac16b78fa47a612dc6ab92d27bcfcef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in get-your-sht-together-how-to-stop-worrying-about-what-you-should-do-so-you-can-finish-what-you-need- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a43ef9bfe905e77cc298a953b9bfb8a983e8a2838808ad9b94f595a8d76ddb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dow-load-the-best-we-could-do-by-thi-bui-on-ipad-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbe34371c86eb25d33028fc43131c1b1b281f7e57986816c88163b17125302b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in theft-by-finding-diaries-1977-2002-by-david-sedaris-on-kindle-new-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f908f4ccc0a28c94802da4ab1792616bfdeb1f1c3f5faf766ee5390fd3f3d189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-473 Malicious code in get-your-sht-together-how-to-stop-worrying-about-what-you-should-do-so-you-can-finish-what-you-need- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a43ef9bfe905e77cc298a953b9bfb8a983e8a2838808ad9b94f595a8d76ddb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-867 Malicious code in the-four-tendencies-the-indispensable-personality-profiles-that-reveal-how-to-make-your-life-better- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3e9297cd32e9acc254a75e4a5d526916cc24499d026cbc04de40218284ff849 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-503 Malicious code in homo-deus-a-brief-history-of-tomorrow-by-yuval-noah-harari-on-audible-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7113f20e74d21a481eb7e3c7305184685724e0e05de2bbbcb9ce76e2df4fdb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...