Malicious code in working-today--1-blocks-every-second-script-n9qfzq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware befe2b725bae28bf00547f7be8107d102adf5ae609e0ed65f03b5ba7a40f0662 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cap-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c67eacc7aaa76752177a54808d1dec8de27842394b3a20bcf9b51fc779b9417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openai-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0209fe94e2a98b2966850b302c4c2dda331437ead2871a609a8677cdc85516fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9136 Malicious code in buy-sell-opensea-sdk-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 387f6a252dc97ef83ae3456d6a7d81fa5f49202e6cd416597e3d07d7317ae014 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in branch-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1be4b8afeed9f4f3ece58c4cfde48b3909e1c22e69a8267c4e156326a79d7235 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in backend-engineering-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba3d379889155c3bbca462ca410261268a1d3a1a0d824d8108c2e4a9a225e8b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in makebetteremail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c05ae267bfe19d2a54f813347f8df26dc550dbe7da0b20207863fd732bcd55d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in asp.app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c7c024883d91bf9fdd3cb49b01873767cbb851c7b663fd2c1ac9d12030157b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redis-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02766e4613356d0e36f10a314a6c3e8b1b712dc126813ac3beff0958cb22c71a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9125 Malicious code in annotation-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2732273e139ee7c5d41de6000e70acf725f550c02141b87340c6a2845111d19c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9135 Malicious code in branch-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1be4b8afeed9f4f3ece58c4cfde48b3909e1c22e69a8267c4e156326a79d7235 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the installation package for microprogramming software in embedded network controllers for building control systems, ASPECT Enterprise, NEXUS Series, MATRIX Series, allows a intruder to gain full control over the device.

The vulnerability of the installation package for microprogramming software in ASPECT Enterprise, NEXUS Series, and MATRIX Series embedded network controllers is related to the use of default account data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full contr...

Malicious code in ads-api-report-fetcher (npm)

The package contains code to exfiltrate local machine information to a remote server over DNS. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57e20c733e3432bce50d7684946f0b982e3dd599d8a2df2689208afe1237c24d Any computer that has this package installed or running...

Malicious code in quantum-visualization (npm)

The package contains code to exfiltrate local machine information to a remote server over DNS. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d42dd8c61fb6c954a84e856396fe7c18901c2f57996f2a7a23947f4e124d4da7 Any computer that has this package installed or running...

CVE-2024-46300

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Full Name field in registration.php...

CVE-2024-46300

CVE-2024-46300 affects itsourcecode Placement Management System 1.0. Multiple sources confirm a stored/reflected XSS vulnerability in the Full Name field of registration.php, enabling script injection. Root cause: improper handling/escaping of user-supplied input in that field. Impact described a...

CVE-2024-46300: Improper Neutralization of Input During Web Page Generation

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Full Name field in registration.php...

PT-2024-31950 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Placement Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the Full Name field in registration.php. This allows for potential malicious script injection. No information is provided...

CVE-2024-46300

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Full Name field in registration.php...

itsourcecode Placement Management System 安全漏洞

itsourcecode Placement Management System is an open source placement management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Placement Management System, which originates from a cross-site scripting attack found in the Full Name field of registration.ph...