17469 matches found
MAL-2024-11961 Malicious code in core-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3799466b97533aa31a0abe7ca229c41f551bbf8e1a3e264fb5af6b2bfe7078c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in action-testtttt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76afe05559b1759ff69fe0657362b303c6e8bff5a5221305fe01dd0842a1e5f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11960 Malicious code in container-toolkit-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 495f1eeee43fdcdf2a5b5468befc8209a0d5d55f315464d80a9ae3d926a34da7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in abacus-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb03bbb0a4e31bfc1d2ca22ccbfc5090ab234c3359195c560188f54d9148113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bitmex-node-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cc7c20df046cd10e263fa37bcda6196d91e23537ce001e8ed4b9598700ad8b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-55056
A stored cross-site scripting XSS vulnerability was identified in Phpgurukul Online Birth Certificate System 1.0 in /user/certificate-form.php via the full name field...
Malicious code in windows-version-check (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 613ba7ede540f232f2e844b88d0e3dbdee0806c83dfbf4cf4bf4ca7a5430aa33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-17393 · Schneider Electric · Schneider Electric
Name of the Vulnerable Software and Affected Versions: Schneider Electric products affected versions not specified Description: A Use of Unmaintained Third-Party Components issue exists that could allow complete control of the device when an authenticated user installs malicious code into an HMI...
CVE-2024-55056: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability was identified in Phpgurukul Online Birth Certificate System 1.0 in /user/certificate-form.php via the full name field...
CVE-2024-55056
A stored cross-site scripting XSS vulnerability was identified in Phpgurukul Online Birth Certificate System 1.0 in /user/certificate-form.php via the full name field...
CVE-2024-55056
A stored cross-site scripting (XSS) vulnerability exists in Phpgurukul Online Birth Certificate System 1.0 . The flaw is located in the /user/certificate-form.php file and is triggered via the full name field . The root cause is a lack of effective filtering and escaping of user-supplied data, al...
CVE-2024-54366 WordPress Vimeography plugin <= 2.4.4 - Full Path Disclosure (FPD) vulnerability
Generation of Error Message Containing Sensitive Information vulnerability in videogallery Vimeography vimeography allows Retrieve Embedded Sensitive Data.This issue affects Vimeography: from n/a through = 2.4.4...
CVE-2024-54366 WordPress Vimeography plugin <= 2.4.4 - Full Path Disclosure (FPD) vulnerability
Generation of Error Message Containing Sensitive Information vulnerability in Dave Kiss Vimeography allows Retrieve Embedded Sensitive Data.This issue affects Vimeography: from n/a through 2.4.4...
CVE-2024-54366
CVE-2024-54366 affects the Vimeography (Vimeo Video Gallery) WordPress plugin. The issue is a vulnerability in error message handling that can expose embedded sensitive data, leading to leakage of sensitive information. Affected version: Vimeography
PT-2024-9677
Name of the Vulnerable Software and Affected Versions: Rockwell Automation Power Monitor 1000 affected versions not specified Description: A device takeover vulnerability exists in the Rockwell Automation Power Monitor 1000. This vulnerability allows the configuration of a new Policyholder user...
Malicious code in 32red-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b425d27a7a8779913e4f7db165b1aa52ac6303632ffb146f9288d2f1da308d8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in 32red-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c76ac7d57265d4cc494b13ff1a0000ff8cbe225dea90e42a200545dd8359e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in 000webhost-checkout (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 264677b0730aa71c63a8f92c073c2b8b7a14b4a54d291ebbe883161a4f8af43f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bounty123ay (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 272a0c5cf3a56fbb91d5d2a6da53f4fd7be8ddc9385faecf02e97d7ec2f263dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
