16827 matches found
Malicious code in react-xterm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5f7c63ca98cf3df8c6642ac2a87eb6834e09162e30cd05b50172c8fa4f5cd32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4395 Malicious code in refreshrewards (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a85c789c3376d220a18e3a4822d1d6b1b347866ec2f7306a35d970a6a6d3c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in kyutai-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eef195dd7dc3e7a30a2bbebaa32b71e36fd4e6a7ad2a7d67ee776953ca7faa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in codeword (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aaf95d3c6934f346d9582d701dca64e259a66b0f2e42ed55c8c2b7096bf7af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bkeat-pytest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d2f35d5b97c478eafa7936e9bec8e276e048160fd82f2cb227e58d9870d107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in node-window-rendering (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware befb1266ed27dcb7e09a8725163d0f8ca44b89e36ee02b3bc3bf904d312e230a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in com.unity.cloud.common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46d26c76ae3c3c9d4f0975262f4b276f17bdaa1b436737ff8fa006f42576d8d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in jquery.currencies (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e84dbc5236755b427f757bbfee2cc19e5bcaa36be99d85cbe488921ecc812f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in com.unity.hlod (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5319349c7317c6b9052fcba5fc0cee51696377cf1363ad07eeebe45b13a7158 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in com.unity.jobs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecf93d5628b724022ac35acd7556ea1b0636ea9fcc5e9e141963fed03258e5b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-28869
A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the browser did not show full URL, such as port number...
CVE-2022-40444
ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? server...
CVE-2021-24930
The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputting it back in a page, which could lead to a Stored Cross-Site Scripting issue...
CVE-2021-37124
There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain...
CVE-2021-39208
SharpCompress is a fully managed C library to deal with many compression types and formats. Versions prior to 0.29.0 are vulnerable to partial path traversal. SharpCompress recreates a hierarchy of directories under destinationDirectory if ExtractFullPath is set to true in options. In order to...
CVE-2021-39223
Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Richdocuments application prior to versions 3.8.6 and 4.2.3 returned verbatim exception messages to the user. This could result in a full path disclosure on shared files. e.g. an attacker could see that the file...
CVE-2021-30856
This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions. This issue is fixed in macOS Big Sur 11.3. A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences...
CVE-2024-6914
An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including...
CVE-2021-39224
Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud OfficeOnline application prior to version 1.1.1 returned verbatim exception messages to the user. This could result in a full path disclosure on shared files. e.g. an attacker could see that the file shared.txt is locat...