WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Cross Site Scripting (XSS)

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.59 Fixed in 1.3.60 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4710 Patch priority High CVSS severity High 6.1 Developer WProyal PSID 88dfeeb21d4c Credits Ramuel Gall Required...

MAL-2022-5329 Malicious code in phup.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3505fe1eb9dd6b5d7010e73296e7952e76792f78261783958c23ebb1e88f20c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5328 Malicious code in phup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dac74638b6d2daf3c5fba99cb693badc947e824ec0622ec155ad7f1a0ee3100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6239 Malicious code in sponsor-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ff91cd8369dec7dda50c1d1b495256642f2f035c7789c5f99a6520094deabc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-3155: Incorrect Default Permissions

When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an application and the user attempted to open it, then the application was started immediately without asking the user to confirm. This...

When liquidation is not locked, anyone can liquidate another persons' collateral

Lines of code Vulnerability details Impact Petty users can liquidate other people's NFT immediately when the liquidation threshold is reached. Proof of Concept The owner controls the function setLiquidationsLocked and calls the function when a collateral needs to be liquidated function...

Users may be liquidated right after taking maximal debt

Lines of code Vulnerability details Impact Since there's no gap between the maximal LTV and the liquidation LTV, user positions may be liquidated as soon as maximal debt is taken, without leaving room for collateral and Papr token prices fluctuations. Users have no chance to add more collateral o...

MAL-2022-4717 Malicious code in mrpackage1-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd54e93c66de2678ac942d0f8be89b517fa2bb343e1755139c6702f4d29ca809 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5533 Malicious code in pv_ho3ein (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7aa33fb89a5d7bd38f7efcced8a18b26c18b81d9e112bfd15547d569cee8f2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3936 Malicious code in ionpackages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9382fa773715062b398a7ecc33faf317132a1d55869770dfd1ea5295fe068399 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3751 Malicious code in icon-ionicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ea0dd0a77658f88ec68d9fe8b13765b6debe58e5a5bb0aa726f11c8d08d42e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3937 Malicious code in ionpackagesa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2498449d91210e7a1368b0b705157307aa6f00a84da63f3b58ea7155d7713f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6477 Malicious code in test-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ffab3c19a64974ad46d00beb093ba879b9a343947c72c47f7102531ce248f22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2292 Malicious code in cvs-codestyle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3da5af16e19bb4b158ddf6bab94fe69208f359c22aa8538d55e4fa3e4ea41e2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-698 Malicious code in @upc2web/font-firasans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423efc92507f29817b2c44c28e7b4f0a3b38b11903bc525369486a8f69a0b28a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1412 Malicious code in babel-preset-geocaching (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51930a28ac75efda74b85ba2de6a8a191279ea0f3a36f1afa9df7928a9d9aeed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6548 Malicious code in theme_manager_base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bc6db51bd02965797db039443df8af4306318f1bc3800f90f23f2a93e5e9efd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4053 Malicious code in jquery_ui_checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ec7cbc825e540dca6a67d1370e8c9d0cd6d3d116fce5c6fdc5f33f0a66aa780 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7031 Malicious code in waffles-next-doc-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d0d50f724e914440d501dc63fdc4d2a16d56acc44921cedd418cb25aa1508a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4454 Malicious code in mailchimp_transactional (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f09b20df613e38f8309a248103c6111bad857f0c53559f588f4a7dcd9953149 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...