Lucene search
+L

18906 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/04/10 5:55 a.m.•8 views

Malicious code in @lbnqduy11805/potential-octo-enigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2278ac46e2dcc463150100fdf3e8757f162ae7088ed44798085eb277c8111a6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/04/10 5:55 a.m.•16 views

MAL-2024-1231 Malicious code in @lbnqduy11805/reimagined-happiness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97e2395d2365418c586217033d6037fb2930c3ad943b2010f1cb2ef41bde62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/04/10 5:55 a.m.•20 views

MAL-2024-1217 Malicious code in @lbnqduy11805/expert-waddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a6c9de4a9a2e92640f7ed45ec0f7a7c36e202c83d3d062e41e96f3562f2376d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/04/10 5:55 a.m.•8 views

Malicious code in @lbnqduy11805/expert-waddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a6c9de4a9a2e92640f7ed45ec0f7a7c36e202c83d3d062e41e96f3562f2376d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/04/10 5:55 a.m.•11 views

Malicious code in @lbnqduy11805/reimagined-happiness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97e2395d2365418c586217033d6037fb2930c3ad943b2010f1cb2ef41bde62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/04/10 5:55 a.m.•16 views

MAL-2024-1228 Malicious code in @lbnqduy11805/redesigned-journey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d19f2fc0c7ff93d8800786c36451ee9bba3a43f050f0f3b2628d305addac6112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/04/10 5:55 a.m.•12 views

MAL-2024-1214 Malicious code in @lbnqduy11805/cautious-octo-rotary-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8c602f51060e0f2b99a1d4dc7a879c20f80dbe2f2e3a55c604110988bb8fa74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/04/10 5:55 a.m.•17 views

MAL-2024-1226 Malicious code in @lbnqduy11805/psychic-journey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9832425d2c7f99b6ce04ceff2110267bfe854030d8bd2649ef0739088507b7ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/04/10 5:55 a.m.•9 views

Malware in @lbnqduy11805/cautious-octo-rotary-phone

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2024/04/10 3:56 a.m.•14 views

MAL-2024-1252 Malicious code in test-npm-lifecycle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c322c4be83c0549ab734e2734189fe33df9d7c33db8b463fc1826a47bcb2dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/04/10 3:56 a.m.•13 views

MAL-2024-1251 Malicious code in shuaishuaiqiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ac0c8f14a39bde6c27443c843a6185fa0e6ad3c0117eabe24eed2b276ff3336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/04/10 3:56 a.m.•16 views

MAL-2024-1248 Malicious code in benjimain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81874f877a599ba4cd7f60d6888ff32a9768be0126b292e92f2b1716c2b88135 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/04/10 3:56 a.m.•18 views

MAL-2024-1249 Malicious code in shuaiqiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90a14c62cc3d0883cc41fd87a7f5c977dfd73e615c410832cc0acbfd768d6b8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/04/10 3:45 a.m.•5 views

Malware in @sber-sd/assistant-web-sdk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Microsoft Security Update
Microsoft Security Update
•added 2024/04/09 5:00 p.m.•33 views

2024-04 Cumulative Update for Microsoft server operating system, version 22H2 for x64-based Systems (KB5036909)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7.1AI score
SaveExploits0
NVD
NVD
•added 2024/04/09 1:15 p.m.•33 views

CVE-2024-31544

A stored cross-site scripting XSS vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrowername”, “facultydepartment” parameters in /classes/Master.php?f=saverecord...

5.4CVSS5.6AI score0.00443EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/09 12:00 a.m.•71 views

CVE-2024-31544

The Computer Laboratory Management System v1.0 is affected by a stored cross-site scripting (XSS) vulnerability. An attacker can execute arbitrary JavaScript code by injecting malicious payloads into the remarks, borrower_name, or faculty_department parameters at the /classes/Master.php?f=save_re...

5.4CVSS6.2AI score0.00443EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•7 views

CVE-2024-31544: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrowername”, “facultydepartment” parameters in /classes/Master.php?f=saverecord...

5.4CVSS6.2AI score0.00443EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/04/09 12:00 a.m.•15 views

CVE-2024-31544

A stored cross-site scripting XSS vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrowername”, “facultydepartment” parameters in /classes/Master.php?f=saverecord...

6.2AI score0.00443EPSS
SaveExploits1References1
osv_mal
osv_mal
•added 2024/04/08 7:22 a.m.•16 views

MAL-2024-1211 Malicious code in tokenaddress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9025a8419e068972440e8ce7318279901ab845fea1c593ecc34fda8d7f59122d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder