Malicious code in sap-badfiles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a9459e9f1bcf3b7c028ace7fe4af0c22616ec0e041f4f784c04288e1e3d4c79 The OpenSSF Package Analysis project identified 'sap-badfiles' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93f29c39b0fbe0dbf454927f2f6ee05e0adbb099f497b8dcc9f3e5ced8bb2ea1 The OpenSSF Package Analysis project identified 'sap-as' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-7673 Malicious code in sap-cd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b129ce991640a28395649d0743d86a38416052a617e290ac3fbe220ab780351c The OpenSSF Package Analysis project identified 'sap-cd' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in sap-callf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3208f6d862144dd85f15a74236b1f1a27be76127751a61fce66d793d16eab40f The OpenSSF Package Analysis project identified 'sap-callf' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-category (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a75ba0843d7dc2bd9dc65a40834751664a0673576a268a29f67b5d8a9037ce39 The OpenSSF Package Analysis project identified 'sap-category' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-bucket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9012927afba575f7238a84997d4c3987b6dfa74ec9e0bd0c1a1535eeffa6298f The OpenSSF Package Analysis project identified 'sap-bucket' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-bitrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff1af64f5f4528b78c86fd371ecec8b847a0e8847fdacf2326a640bc54f7ac65 The OpenSSF Package Analysis project identified 'sap-bitrate' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-bg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20f6a3120bac488c4ab4a84c2bb18fa286a47953973574e3a4e003b7722753b8 The OpenSSF Package Analysis project identified 'sap-bg' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in sap-birthday (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df8c9e26a14d9264266f8c3e924fb781e39a530c0c3c6f57a87b6b4605a4a4d5 The OpenSSF Package Analysis project identified 'sap-birthday' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e69ab82c52f643c89f238d79661a478bc457d54a88a041b6ea9339fa0866296 The OpenSSF Package Analysis project identified 'sap-array' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ae8fbb8ba4434e711c35209ac7bc8e0d398cb5387e9314b8ad259ea82da4a9f The OpenSSF Package Analysis project identified 'sap-adapter' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in eslint-plugin-ally-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23310826a7310567370020e364d6dedeb87558d2ce0ffcf5bc6054d70951bf3c The OpenSSF Package Analysis project identified 'eslint-plugin-ally-rules' @ 1.0.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-7089 Malicious code in cra-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e49ccaa79a7296b7f1237beb3210cabf6610aab5c68e2c349b1fff4d3b2bb332 The OpenSSF Package Analysis project identified 'cra-docs' @ 7.999.45 npm as malicious. It is considered malicious because: - The package...

Malicious code in coloramaz (PyPI)

--- -= Per source details. Do not edit below this line.=-...

TotalCloud Insights: Protect Your AWS Environment by Managing Access Keys Securely

Introduction With the average cost of a data breach coming in at $4.45M in 2023, safeguarding sensitive information and maintaining the security of cloud environments is more critical than ever. Instances of compromised access keys, not exclusive to AWS Amazon Web Services but prevalent across...

Cross Site Scripting (XSS)

zenml is vulnerable to Cross Site Scripting XSS. The vulnerability is due to missing santization of the logourl field, allowing an attacker to send harmful messages to other users and potentially compromise their accounts...

CVE-2024-23793

The file upload feature in OTRS and OTRS Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading to the execution of local code like Perl...

CVE-2024-2171

ZenML stored XSS (CVE-2024-2171) affects ZenML prior to 0.56.2 due to unsafely accepted content in the repository field logo_url . The issue is a stored XSS that could allow an attacker to inject payloads, potentially compromising user accounts. Affected version: 0.55.3; fix: 0.56.2. Multiple con...

CVE-2024-5184 Prompt Injection in EmailGPT

The EmailGPT service contains a prompt injection vulnerability. The service uses an API service that allows a malicious user to inject a direct prompt and take over the service logic. Attackers can exploit the issue by forcing the AI service to leak the standard hard-coded system prompts and/or...

CVE-2024-5184 Prompt Injection in EmailGPT

The EmailGPT service contains a prompt injection vulnerability. The service uses an API service that allows a malicious user to inject a direct prompt and take over the service logic. Attackers can exploit the issue by forcing the AI service to leak the standard hard-coded system prompts and/or...