CVE-2019-10267

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the...

CVE-2015-1784

In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests...

CVE-2011-5117

Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of 1 out-of-date credentials and 2 invalid credentials, which allows physically proximate attackers to defeat t...

GitLab Enterprise Edition（EE）和GitLab Community Edition（CE） 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition EE and GitLab Community...

Malicious code in lolnews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7215858bd520348bd1b650a0c7bfebb41fa47b6ca3c3fa269f18dbcd0b13848 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in migrate-lol-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88dbcb391cecbefa568dbffa3d4296d9fa09eddb14625e899283b70920acaea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4099 Malicious code in lolnews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7215858bd520348bd1b650a0c7bfebb41fa47b6ca3c3fa269f18dbcd0b13848 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csat-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6108820bc94bf57a91a424d61c4704c69a86f807ea9f4993a63255a993ee8a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lol-project-2017 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 713140b3d10253eb856068004fa4bc07dfbc38a48b4f0a2a706fe7c242284553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in db-cleaner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a72cd0c1c8572d55b42f5b29e3ba12562254d45caf82e25ebe93583f35e9af68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-express-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c67a77d1ceecd09a751770bc9ef718c7d27abb961712f380e94dec491ec811fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raydium-sdks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4bd247852f5f5e13010c679bfbe762180e81dd4a57f9b37d607b3ef1f13f021 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grammy-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ed36c0c9d339418b7fb4e6d6a1935303e10cf8837050934a3d6d61f0a1b6f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wallet-chii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b348aa31d5d8beaa0b2d5dbc117c094a25dfaf9c0d515d0a97ed4df897bac25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4131 Malicious code in slowingdown4u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f332e8f6680150c84aa7c785655341845220594fe64707a07857819503c466e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4089 Malicious code in human-readable-time-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c9a8186838a4df771f127895d5aee834c26caebf7c60379f604464fc1f33356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in module-dmall-discord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d57f50d40effb7b9df9c15b7c206e22b3ffb792478ca1ee993e45c62fc4b40ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chains.web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162ab39d32e8af255dcaad40e29e294e4849e4c76273631024ddb7cc9a4398c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dexfile.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030322be28cfdc4341c3cf0199d441c986dbb8f4eee5783c7838c7c6af53a011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdkss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f46cdba3fb83ff72cb7127859fb5140d6fc6f8ed207f45919c5c64bc494f3097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...