WordPress Newsletter - API addon (Premium) Plugin <= 2.4.5 is vulnerable to Broken Access Control

Software Newsletter - API addon Premium Type Plugin Vulnerable versions = 2.4.5 Fixed in 2.4.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5674 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID f2621f00fec2 Credits Arkadiusz...

MAL-2024-1568 Malicious code in apl-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c9d01a1289fd5e02d94728d6b0a19ec77687aadfde1e9807050227a0de03dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-5482 SSRF in add_webpage endpoint in parisneo/lollms-webui

A Server-Side Request Forgery SSRF vulnerability exists in the 'addwebpage' endpoint of the parisneo/lollms-webui application, affecting the latest version. The vulnerability arises because the application does not adequately validate URLs entered by users, allowing them to input arbitrary URLs,...

CVE-2024-5482

CVE-2024-5482 describes a Server-Side Request Forgery in the Parisneo/Lollms-WebUI - specifically the add_webpage/add webpage endpoint. The issue arises from insufficient URL validation, allowing attackers to supply arbitrary URLs (including localhost/127.0.0.1) and trigger unauthorized requests ...

kernel: RDMA/siw: Fix connection failure handling

A NULL dereference vulnerability was found in the Linux kernel, which is caused when the siwcmworkhandler function attempts to dereference a NULL listener that may be created when immediate MPA request processing fails and the newly created endpoint unlinks the listening endpoint ready to be...

kernel: RDMA/siw: Fix connection failure handling

A NULL dereference vulnerability was found in the Linux kernel, which is caused when the siwcmworkhandler function attempts to dereference a NULL listener that may be created when immediate MPA request processing fails and the newly created endpoint unlinks the listening endpoint ready to be...

MAL-2024-1528 Malicious code in winextracter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec386ca312f4527fe9f4260bf50d54dbc2abd05df6fd2784420e95e52cff8baf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1499 Malicious code in @juiggitea/veritatis-dicta-odit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e34344ffba345843fa39f7506c0dc9642c03d6c35e9fff45fd3f121e5f5aa00d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1506 Malicious code in command-injection-avi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54fd75c755589d5d22d320040508b52efe2fbce858fb0d335c391c2de86df60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1486 Malicious code in @juiggitea/reprehenderit-distinctio-eligendi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2a9f6cecd2cf176717f4e7156853376de7daa7b8af31cd521dc38bf8e1070f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1482 Malicious code in @juiggitea/ratione-debitis-ratione-dignissimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f49703880366582d0f134e1c54fac01c6ca116430d231e7685b463c350aa0a6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1481 Malicious code in @juiggitea/quod-voluptatibus-molestias-modi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757fcc48a2d8bf16a4025910d6ded04f0aa457e61a0c4b175e318f19d67694f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1484 Malicious code in @juiggitea/repellendus-quae-debitis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56872e3b56acd4c6631330aa5cb3bcbd56383b3c28030347b1c4da8f48c082d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1459 Malicious code in @juiggitea/nulla-a-quam-voluptatem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e455a6cd6eea3b9f878efc8dc7755308d33c89e81a74063fba9c463f2cf6f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1449 Malicious code in @juiggitea/minima-iure-necessitatibus-corporis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9be7f0e427023755e10a38fcbd22c27c5ff397ee86ff25fd74e24df7b65f738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1447 Malicious code in @juiggitea/maiores-facilis-recusandae-debitis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dacb951df731573fec00991a5e94a410ae81ff4eb843261feb4b3b99286840a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1438 Malicious code in @juiggitea/ipsa-odit-illo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31cd93d44d0d07c59a19d23861f5bbc751f01d6159b65974853d72ce668c7683 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1433 Malicious code in @juiggitea/error-similique-quod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4be67be013f18dc22a30e9cafa3c885434574c0c5f2a66198f2f3cc6576c756e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1430 Malicious code in @juiggitea/enim-facere-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb7722f5e1f5fae80c11f3a2cc79159d2dd0983e2673a03bafc47efb0037c9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1427 Malicious code in @juiggitea/earum-in-minima-maiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16aca93b57ff194290fce6d6df3d8e7187dd52feec3d77d1864a1925fd318ba9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...