Malicious code in squaredev-next-online-payments-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c12aadbc7b6d08bd4746e705c7507074eb759ac60f260bdf9a59cd85d966a45b The OpenSSF Package Analysis project identified 'squaredev-next-online-payments-example' @ 99.0.0 npm as malicious. It is considered malicious...

MAL-2024-1 Malicious code in squaredev-next-online-payments-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c12aadbc7b6d08bd4746e705c7507074eb759ac60f260bdf9a59cd85d966a45b The OpenSSF Package Analysis project identified 'squaredev-next-online-payments-example' @ 99.0.0 npm as malicious. It is considered malicious...

Exploit for Code Injection in Sitecore Experience_Commerce

CVE-2023-35813 Exploit for CVE-2023-35813 example use:...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Confluence Pre-Auth Remote Code Execution via OGNL Injection...

org.infinispan.server:example-configuration-tests (6.0.0.beta1), org.infinispan:infinispan-as-modules (6.0.0.beta1) +1 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (6.0.0.beta1)

org.infinispan:infinispan-client-hotrod MAVEN version 6.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:example-configuration-tests 6.0.0.beta1 -...

Malicious code in app-next-example-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8ca79ef64add6f7047e7d406bfa4128511f415f4e21c16722d1da3c6d4d14721 The OpenSSF Package Analysis project identified 'app-next-example-plugin' @ 3.3.3 npm as malicious. It is considered malicious because: - The...

Exploit for Files or Directories Accessible to External Parties in Apache Struts

CVE-2023-50164 A scanning utility and PoC for CVE-2023-50164...

SysAid /lib/tinymce/examples/index.html Component Data Compromise

The vulnerability of the /lib/tinymce/examples/index.html component of SysAid’s automation software relates to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

org.jupiter-rpc:jupiter-example (>=1.2.0, <=1.2.7), org.jupiter-rpc:jupiter-extension-tracing (>=1.2.12, <=1.3.1) +3 more potentially affected by CVE-2023-48887 via org.jupiter-rpc:jupiter-rpc (>=1.2.0, <=1.3.1)

org.jupiter-rpc:jupiter-rpc MAVEN version =1.2.0, =1.2.0, =1.2.12, =1.2.0, =1.2.0, =1.2.0, =1.3.1 Source cves: CVE-2023-48887 Source advisory: GHSA-6PQX-V9G4-5HC8...

Title of issue/finding

Lines of code , Vulnerability details Impact description for the issue found Content includes @Audit stack and code example of the issue Content includes @Audit stack and code example of the issue Assessed type other --- The text was updated successfully, but these errors were encountered: All...

Unchecked return value of low-level

Lines of code Vulnerability details Impact description of issue/finding Content includes @Audit stack and code example of the issue Assessed type other --- The text was updated successfully, but these errors were encountered: All reactions...

GHSA-Q3QX-C6G2-7PW2 aiohttp's ClientSession is vulnerable to CRLF injection via version

Summary Improper validation make it possible for an attacker to modify the HTTP request e.g. to insert a new header or even create a new HTTP request if the attacker controls the HTTP version. Details The vulnerability only occurs if the attacker can control the HTTP version of the request...

UBUNTU-CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

Malware in kratos-nextjs-react-example

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in kratos-nextjs-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002a702a76a5afe71ba598cb987b7d8cb8624bd74161c63a0e642fb288083bb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8553 Malicious code in kratos-nextjs-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002a702a76a5afe71ba598cb987b7d8cb8624bd74161c63a0e642fb288083bb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ch.inftec.flyway:flyway-extension-commandline (>=1.3.1-beta-2, <=3.2.1-final), ch.inftec.flyway:flyway-extension-example (>=1.3.0-final-1, <=3.2.1-final) +181 more potentially affected by CVE-2022-46337 via org.apache.derby:derby (>=10.8.1.2, <=10.8.3.0)

org.apache.derby:derby MAVEN version =10.8.1.2, =1.3.1-beta-2, =1.3.0-final-1, =0.0.7, =2.0.0, =1.0.0, =1.2.0, =2.8.28, =1.0.1, =1.5.0, =1.0.0, =1.0.1, =1.3 and more Source cves: CVE-2022-46337 Source advisory: GHSA-RCJC-C4PJ-XXRP...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2023-40611 +1 more via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2023-40611, CVE-2023-47037 Source...

com.diffplug.durian:durian-swt (>=3.0.0.beta3, <=5.2.0), com.diffplug.durian:durian-swt.cocoa.macosx.aarch64 (>=3.6.1, <=5.2.0) +179 more potentially affected by CVE-2023-4218 via org.eclipse.platform:org.eclipse.jface (>=3.12.2, <=3.30.0)

org.eclipse.platform:org.eclipse.jface MAVEN version =3.12.2, =3.0.0.beta3, =3.6.1, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.31, =1.0.0, =1.0.0, =0.1.0, =1.0.1 and more Source cves: CVE-2023-4218 Source advisory: MEND:CVE-2023-4218...

PathFinder - Tool That Provides Information About A Website

Web Path Finder is a Python program that provides information about a website. It retrieves various details such as page title, last updated date, DNS information, subdomains, firewall names, technologies used, certificate information, and more. Retrieve important information about a website Gain...