Malicious code in karma-fest-preprocessor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fc59d44987dfafc3d0226a2629d1aa8294664f22936a59406d8e77b6695b2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-57898

creationtimestamp| type| source ---|---|--- 2025-01-15 13:17:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtzdgdkr2b 2025-01-15 13:47:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfrvq5ymqx2u 2025-01-15 14:22:18+00:00|...

WordPress Same but Different – Related Posts by Taxonomy plugin <= 1.0.16 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Same but Different – Related Posts by Taxonomy versions = 1.0.16...

PT-2025-1645 · WordPress · Same But Different – Related Posts By Taxonomy

Name of the Vulnerable Software and Affected Versions: Same but Different – Related Posts by Taxonomy plugin for WordPress versions up to, and including, 1.0.16 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg and remove query arg without...

CVE-2024-56290: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce different-shipping-and-billing-address-for-woocommerce allows SQL Injection.This issue affects Multiple Shipping And Billing...

CVE-2024-11363: Improper Neutralization of Input During Web Page Generation

The Same but Different – Related Posts by Taxonomy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated...

Malicious code in healenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab4597abf70195617218b4366cc4e83ea35770e784027c1909b352f258da5b8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gft-model-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b553d507e20e5d98f5bb1934bad6b5d49d32085028d96603c5eceb371c3851e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fluid-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c91755cc441a577f7a891af00b7ad8e1a9de715f40002af3df668be2b19d571 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in manajemenservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00f781e5ec61ec2d725507626667d8de0819e01e64f92bcd3d1b5232b99df76d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alifx-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8716d89d3543726f75604dccfd9a5ab777f48047bb3aa028cdc047c77d1b9dc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

cri-o: Checkpoint restore can be triggered from different namespaces

A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that restoration, it attempts to restore the mounts from the restore archive instead of the pod request. As a result, the validations run on the...

Malicious code in operation-server-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 562d8b7d5fca6f14e6a57f77567f7fbb054ae76c5e77c760fc622107d046bd88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in item-sold-count (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a46503c4e90014d05e169ab2eb5f007e146799827b815ffce79871612b624c9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-big-calendar2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c321db3b19ff6afdabbb4ca384e17c7b2fe9c7c271b7faa2716e1214903906b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npmrunnall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02e76869051760cad21e27046ef3eaf4df72e1188ba6eb04573327b86a2fee49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in debugr1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d8da47712ca04d79a2bec26869c777f7581be1aeb31aeacf3d22c37fdc27ce6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-shared-component-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7b8d8fe1019a5e94c13232a7501bb7dc77b9f34c4b2c02354edfc3ab84d27f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-chat-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1410c02449b7f9317f68317b69ec23e5601c189018c375ccdcb1d453def943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10524

A flaw was found in the Wget package. Wget might issue an FTP request to a different host in configurations where the HTTP shorthand format is used with user-provided input. An attacker may be able to use specially crafted input to cause Wget to access an arbitrary host...