Malicious code in @diotoborg/consequuntur-dolorem-dicta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f213e5ae0b66204727b039d73a0c80ce3554366c5cfe52e65f43fc9da97cd90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/necessitatibus-voluptas-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d040370140af8f1fdf35233a8d44ade81b7c8c3561be0b8d4e3788a23a0882a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/illum-ad-corporis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697629157fc87cdd44f67258a507098c56ef42fb64823ae1130b671cfd7ceb7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8476 Malicious code in @diotoborg/non-reiciendis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfc15fc5f38fd3f6e22dba7c6a6376651aa64706e3e0602a50903b3068117782 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/provident-accusamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1add6a745f4be527bd396ad496b468c62373ae40cd7efb067e7f299367e77b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/illo-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecf1886726052de945f9a768596e5c3e08e689b6ca2ba6b85b0b741115c428d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/deleniti-adipisci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df0945b562d08e38de18e5744ec4a7dabb00b1b9831a99310f76ee950b95c108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nuuo Central Management Server User Session Token Bruteforce

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'benchmark' class MetasploitModule 'Nuuo Central Management Server User Session Token Bruteforce', 'Description' = %q Nuuo Central Management Server below versio...

WebNMS Framework Server Credential Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WebNMS Framework Server Credential Disclosure', 'Description' = %q This module abuses two vulnerabilities in WebNMS Framework Server 5.2 to extra...

Microsoft Windows SRV.SYS SrvSmbQueryFsInformation Pool Overflow Denial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Windows SRV.SYS SrvSmbQueryFsInformation Pool Overflow DoS', 'Description' = %q This module exploits a denial of service flaw in the...

Full Path Disclosure

Drupal is vulnerable to Full Path Disclosure. The vulnerability is due to improper error handling in core/authorize.php when hashsalt is set to the filegetcontents of a non-existent file...

Malicious code in copilot-web-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbb28669371353c111a05f7fb6bb2803179610b8ccec893590a34d2343e90fc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-MG8J-W93W-XJGC Drupal Full Path Disclosure

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist...

Drupal Full Path Disclosure

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist...

CVE-2024-6551

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.15.1. This is due to the plugin utilizing Symfony and leaving displayerrors on within test files. This makes it possible for unauthenticated...

CVE-2024-6551

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.15.1. This is due to the plugin utilizing Symfony and leaving displayerrors on within test files. This makes it possible for unauthenticated...

CVE-2024-45440

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist...

CVE-2024-45440

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist...

UBUNTU-CVE-2024-45440

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist...

CVE-2024-6551

CVE-2024-6551 pertains to GiveWP – Donation Plugin and Fundraising Platform for WordPress, where Full Path Disclosure is possible in all versions up to and including 3.15.1 due to display_errors being left on in test files. This allows unauthenticated attackers to retrieve the web app’s full path...