WordPress Plugin WP eBay Product Feeds 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

MAL-2023-452 Malicious code in follow-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cc58a7a39a3da5508a2d0e86e8a9b92384514b331afbb923e6d20295b6c0f65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-208 Malicious code in core-site-speed-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1583a2587d4a117d6dc59133fd52c7c8da04f57cd6265a159e8c50da5e82d8bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core-site-speed-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1583a2587d4a117d6dc59133fd52c7c8da04f57cd6265a159e8c50da5e82d8bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in follow-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cc58a7a39a3da5508a2d0e86e8a9b92384514b331afbb923e6d20295b6c0f65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview core-site-speed-ebay is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview follow-ebay is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

SketchSVG 代码注入漏洞

eBay SketchSVG is eBay's tool for extracting icons from Sketch files and compressing them into SVGs. A security vulnerability exists in SketchSVG that stems from vulnerability to arbitrary code injection when shell.exec is called...

WordPress WP eBay Product Feeds Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

Software WP eBay Product Feeds Type Plugin Vulnerable versions = 3.3.1 Fixed in 3.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23722 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 951d668c8f74 Credits yuyudhn Required...

Cyberstalking, pig masks, and cockroaches: Former eBay execs are sentenced

The former Senior Director of Safety & Security at eBay, and the companys former Director of Global Resiliency, have been sentenced to prison for their roles in a cyberstalking campaign. The targets of the campaign were the editor and publisher of a newsletter that eBay executives viewed as...

MAL-2022-6284 Malicious code in sso-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7469ad8fd2e8d9261c8ff5f66e095f51b7a1e9334c4de88f2cb86cb5f91a4af4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2127 Malicious code in commons-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fca6c21af828f60fe97221a1964dd96fdfa94550187dd44fb09f7201f4d34f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in security-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f34f022f6da3bc1dc777a1311e7aaddde9d442e08bc13025aac5639f6695280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sso-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7469ad8fd2e8d9261c8ff5f66e095f51b7a1e9334c4de88f2cb86cb5f91a4af4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-client-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81133afd96840f03b4b34fcc3f650cf01fa899ee95fac5471d1b540947833c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6030 Malicious code in service-client-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81133afd96840f03b4b34fcc3f650cf01fa899ee95fac5471d1b540947833c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commons-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fca6c21af828f60fe97221a1964dd96fdfa94550187dd44fb09f7201f4d34f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metrics-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 444d75d1e9415004ef5f95cbd2adcb09332c35ba4bae38c6d39b93a6f224226b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4577 Malicious code in metrics-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 444d75d1e9415004ef5f95cbd2adcb09332c35ba4bae38c6d39b93a6f224226b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5994 Malicious code in security-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f34f022f6da3bc1dc777a1311e7aaddde9d442e08bc13025aac5639f6695280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...