MAL-2024-1371 Malicious code in @ozon-ob-foundation/communication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbd79919619acaea0f1d0de932d737a71b7ac5c27049e11483522540d39daed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1370 Malicious code in @ozon-fe/media-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f83f6ec5a227a2759eaf3a0f63b52ed88c790c3af44ea8bf3a9fa132d746220e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1369 Malicious code in mixtral-llm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8f29dbee4aa92684c9adc9e0484e255cac83931500c1651073b71123d728fd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1368 Malicious code in brand-adidas-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e16fae72fd3726263d7bfa2f1c164b7d4100f89931856c163e37c534feb1a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1367 Malicious code in brand-adidas-asset-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35b2e8dbb891acdef0e8c7d2e97c0b27c3e6e9d4fb4ff284fa0d9542acb2c893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-12838

Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for macOS affected versions not specified Description: The issue is related to improper access control in IntelR Power Gadget software for macOS, which may allow an authenticated user to potentially enable...

PVS export wizard reports "No Devices Found to Export"

Unable to add PVS provisioned machines to Studio Machine Catalogs. When using the Export Devices Wizard, users receive the error "No Devices Found to Export". Issue remains even after deleting and recreating the AD computer objects...

MAL-2024-1366 Malicious code in sigoner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b7a5f58464c5193c5d937ef7dd00a42fa46a5b30ad2dd711d05cb143ca5132 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-4798

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /admin/maintenance/managebrand.php. The manipulation of the argument id leads to sql injection. The attack may...

CVE-2024-34224

Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters...

CVE-2024-34225

Cross Site Scripting vulnerability in php-lms/admin/?page=systeminfo in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the name, shortname parameters...

CVE-2024-28279

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...

Computer Laboratory Management System 安全漏洞

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Sourcecodester Computer Laboratory Management System version 1.0, which originates from a cross-site scripting vulnerability that allows remote attackers to inject arbitrary web...

Computer Book Store Security Breach

Computer Book Store is an online bookstore system by the individual developer Carmelo Garcia. A security vulnerability exists in Code-projects Computer Book Store version 1.0, which stems from vulnerability to SQL injection attacks...

Computer Laboratory Management System 安全漏洞

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Sourcecodester Computer Laboratory Management System version 1.0, which originates from a cross-site scripting vulnerability that allows remote attackers to inject arbitrary web...

Computer Laboratory Management System 安全漏洞

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Computer Laboratory Management System v1.0, which stems from a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or HTML via a crafted...

Online Computer and Laptop Store 代码问题漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A code issue vulnerability exists in Online Computer and Laptop Store version 1.0, which stems from the file /classes/SystemSettings.php?f=updatesettings causing unrestricted uploads...

CVE-2024-28279

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...

CVE-2024-28279

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...

CVE-2024-28279

CVE-2024-28279 affects Code-projects Computer Book Store 1.0. The vulnerability is an SQL Injection exploitable via the endpoint book.php?bookisbn=, enabling remote manipulation. Several connected sources confirm the issue and indicate high risk (CVSS v3.1: 7.3, HIGH). Remediation/immediate actio...