MAL-2023-189 Malicious code in cms-models (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7660bdda7ac53c4bd35a3b5698ca80b7d2f5bf8bd47a5e7e6163aead683350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-643 Malicious code in npo-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7254cfce2ac433959ef4d93d3b6849ceeefc1c407e39b4d5368c174d7fd72dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-194 Malicious code in cms-ui-presentationlogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ed28c883575b30f00714232f671ed736feb78c5dcc8ab6326d2d6eacc20466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-192 Malicious code in cms-typed-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e09011747adf2ed15cf63102619f15d4324bb7714e11c0d4bbb33e1eaa82284 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-596 Malicious code in milo-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e0a528e7d78836123c80e70f5b1108807ae1c739ab8c65ad4a90702c07dab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-422 Malicious code in fca-sumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e5effa05b5d9a206eeb8b3ff81daa2287c6897c5e3d2df2aaf4d62932347a9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-661 Malicious code in owa-sprite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6438db9d4289d3d8728e6308442f731128ad1d364e2d0cf6d58261f7ca7db98a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-663 Malicious code in owa-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a60a11fa8007678688a3a358a3af447fc85b65c2358d8799dcc1916f7504c7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress OAuth Server Plugin < 4.3.0 is vulnerable to Broken Access Control

Software OAuth Server Type Plugin Vulnerable versions 4.3.0 Fixed in 4.3.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-4148 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 20d9eb3b6ea8 Credits Lana Codes Required privilege...

MAL-2023-255 Malicious code in discord.js-hakai-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a908f033e96eb0d899327ba365b5e97d307772f0f8f2daa21c5edd0076b0323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-435 Malicious code in fe-core-components-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60e569c72a226b7f460fd4ee1792523d0c53a9206b27aef9a6d2774378754ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2015-7848

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to ...

MAL-2023-534 Malicious code in jiser-sp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2bd3e25c3ee0d6a560720ad7cafed6839f4aee3894b4cdcc4514631dd6fa4b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-827 Malicious code in synthetic-jiser-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 321d9dba211cbd5bc6fca060c3ac8011e47fc368c530ce63d5647d9a1ea5672c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RCE by Server Side Template Injection

Description Hi, During my testing, I discovered that it is possible to inject code into the system through the "first name" field. This vulnerability allows for server-side template injection, which can lead to arbitrary code execution. The impact of this vulnerability is potentially significant...

MAL-2023-59 Malicious code in @superbet-group/martech.lib.google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 623842b7ea3cf0abe8ef8b80d5eed291e97bcc42d9ad072da19aca5c6d3d456c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-61 Malicious code in @superbet-group/web.lib.flags (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 852821ee1ad9212bdcbbf1a16f7a0cd05db090379051a9725aecaf33a24e703d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-928 Malicious code in usamaturk1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e085b7e1bf5f066d6026022820b7b037a92d4bd22cac93050d8657882b7a9e10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-884 Malicious code in thenamk3zg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52bcaf8a754f24d5679cb567cca3c9c6ab028ac369266cacf4ca6d4494f5c27b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-95 Malicious code in angular-portal-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d52cb1a168b0e9a95128e2cb22f54bf039750753cedc3fbb1012b1d968ad117 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...