Malicious code in lit-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58fa9943fe7f3a2ad80c2d7ec817ab05718838e0aef345b7d44416f0f525cdc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in broadcast-podlet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73de5f4ddc33163129934b982d533ce73fdfe00485428f486f3b8d2312de1537 The OpenSSF Package Analysis project identified 'broadcast-podlet' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Calibre Python Code Injection (CVE-2024-6782)

This module exploits a Python code injection vulnerability in the Content Server component of Calibre v6.9.0 - v7.15.0. Once enabled disabled by default, it will listen in its default configuration on all network interfaces on TCP port 8080 for incoming traffic, and does not require any...

CVE-2024-39457

Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user’s web browser...

CVE-2024-39457

Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user’s web browser...

Malicious code in marvinjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 965b7b4455eec757889260ad7d11671ee747f1d78f5ccca323303d223f246c43 The OpenSSF Package Analysis project identified 'marvinjs' @ 5.5.6 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-categories (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8915969d8530822c50077e17c288da7a30eed3ba1ea7f59b925794f7057b9705 The OpenSSF Package Analysis project identified 'sap-categories' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-call (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae3c2c5f325fdd688ce4d11cc5817769bd0f903c9d0df96c60c00cd96feb4639 The OpenSSF Package Analysis project identified 'sap-call' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7655 Malicious code in sap-callerid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aaf954365d809a7ff5859e9f1797a1acb30ac55273ed61e83c468025645b7116 The OpenSSF Package Analysis project identified 'sap-callerid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2afad02c98c4f6eb4d6616501b94fa8d0e753c27bc44db56cbda21007caff4f8 The OpenSSF Package Analysis project identified 'sap-button' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7629 Malicious code in sap-bodytext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13ca72d7cf90b082471932dde2a189cf23531ac4f6682bccd09ef9e2ba536852 The OpenSSF Package Analysis project identified 'sap-bodytext' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86709b300e2374d5bb16f8f492ae06e7d41fc92ca711bb29118742ea23c6acec The OpenSSF Package Analysis project identified 'sap-box' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in sap-aid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cafde5225847d941e4af37b18ca5befb5302ebbdc046e32b055d3994a65b99e9 The OpenSSF Package Analysis project identified 'sap-aid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in sap-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58420a49ed777d835cee58dafa044a3b2960aae4ff06d85f920dd45618e5f324 The OpenSSF Package Analysis project identified 'sap-agent' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-34141 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2024-36203

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36205 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36200 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36219 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

ZKsync Era 安全漏洞

ZKsync Era is an open source compiler from Matter Labs. A security vulnerability exists in ZKsync Era versions prior to 1.3.10, which stems from checkifaexeculatedlast exposing a bug in the order in which Yul function arguments are evaluated...