Malicious code in @instapro/design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1df456078704e7e82378b65eb7ad990f7760a176f671479925f6cde242d05df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @contrast-security-inc/design-system-foundations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48b4683a6b251cef2ea9ceca8762aefd8802af287dc62ddf87ac5c19a1a4b406 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-542 Malicious code in @qualtrics-translations/qualtricsdesignsystemui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0119cbd28105b14fbc9605b5f5a0c32b096e56f842815c45d944f19f7d32f0a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in design-system-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf54fc5bdd0f75d047cec19cff91ad519eae2b7cd33b0471f1b527505df2668e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2447 Malicious code in design-system-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf54fc5bdd0f75d047cec19cff91ad519eae2b7cd33b0471f1b527505df2668e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-451 Malicious code in @ncr-design-system/cxd-npm-releases (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006d2f71b3519c6fc98d63cb3fe8db7b056395cb490db6a35bd2b75de7da5d12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-450 Malicious code in @ncr-design-system/cxd-npm-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1057092de4a4a513e2dfc25179d2f023f8dab1939839baea98b5d1e547dffd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7328 Malicious code in yarn-design-system-logos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9006849a713475d0be0ef3619338ecd191969c2f0a3d9d8d310cd68e292e75a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yarn-design-system-logos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9006849a713475d0be0ef3619338ecd191969c2f0a3d9d8d310cd68e292e75a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mollie-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e4acdc4d5f723ad8ee6225520718f124eeb148131903261e445699cbd664d21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4669 Malicious code in mollie-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e4acdc4d5f723ad8ee6225520718f124eeb148131903261e445699cbd664d21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GOV.UK Theme - Moderately critical - Cross site scripting - SA-CONTRIB-2022-027

The GOV.UK Theme govuktheme is a Drupal theme for the GOV.UK Design System. The theme doesn't sanitize user input in certain cases, which leads to Cross-Site-Scripting XSS vulnerabilities. An attacker that can create or edit certain entities or configuration may be able to exploit one or more...

@3kmfi6hp/nodejs-proxy (>=1.0.0 <=1.0.4), @aarhus-university/au-designsystem-delphinus (>=1.0.0 <=1.2.0) +342 more potentially affected by CVE-2021-21353 via pug-code-gen (>=0.0.0 <=1.1.1)

pug-code-gen NPM version =0.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.0, =0.2.0, =0.0.1, =0.0.2, =0.8.10, =0.0.9, =1.0.0, =2.1.1-alpha.1 and more Source cves: CVE-2021-21353 Source advisory: OSV:GHSA-P493-635Q-R6GR...

SQL Injection Vulnerability in Taiwan Billionaire Web Design Company's Website Building System

Taiwan Billion Web Design is a web design company. A SQL injection vulnerability exists in the web design system of Taiwan Billion Web Design Company, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Web Design System of Weili Taiwan Ltd.

Taiwan Weili Web Design Co., Ltd. is a customized web site based on customer needs, mainly promoting the suite of web design services, customers include food, electronics, computers, machinery and service industries, etc.. A SQL injection vulnerability exists in the website building system of Wei...

IBM Curam Social Program Management HTML Injection Vulnerability

IBM Cúram Social Program Management SPM is a suite of social program management solutions from IBM in the United States. The solution supports the end-to-end social program delivery process.Social Program Management Design System is one of the Social Program Management Design System components. A...

@7ninjas/scss-mixins (=1.0.0-alpha3), @afiniti/design-system (>=0.0.1 <=0.0.8) +247 more potentially affected by CVE-2018-14042 via bootstrap (>=4.0.0 <=4.1.1)

bootstrap NPM version =4.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.0.0, =0.0.16, =0.0.1, =1.0.0, =2.0.0-alpha, =2.3.2, =1.0.0, =1.0.3 - @evoxmusic/angular =0.7.5 and more Source cves: CVE-2018-14042 Source advisory: OSV:GHSA-7MVR-5X2G-WFC8...

File Uploading Vulnerability in Nanjing Centaur Graduation Design System

Nanjing Xianji Graduation Design System is a set of management system that runs through the whole process of school graduation design thesis. A file upload vulnerability exists in Nanjing Centaur Graduation Design System, which can be exploited by attackers to upload arbitrary files...

SiteBuilder-FX top.php admindir Parameter Remote File Inclusion

The remote host is running SiteBuilder-FX, a web-based design system written in PHP. The version of SiteBuilder-FX installed on the remote host fails to sanitize input to the 'admindir' parameter of the 'admin/top.php' script before using it to include PHP code. Regardless of the setting of PHP's...