MAL-2024-1260 Malicious code in trip-component-platform-online-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2b1894dd696dfb0e732a29e63d51abc46571ac2e0b0528d22359a070066b65d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Tax Rate Upload Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

Software Tax Rate Upload Type Plugin Vulnerable versions = 2.4.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32546 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e0f99a4ecd9c Credits Dimas Maulana Required privilege...

MAL-2024-1243 Malicious code in @lbnqduy11805/turbo-octo-memory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bd870e9a4b756cffdd1e5cfba86cd8edb34d34c9ca9467057155fc0e9b0d750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1215 Malicious code in @lbnqduy11805/congenial-dollop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d1cb2d7d244fdb7219d86dee78afe5370e0de021b8cf06e5375753e33430d67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1233 Malicious code in @lbnqduy11805/silver-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48fa3414b1fc4238faa198d07d0f7a8e656a706a83fae508bac516436f6860fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DoS (Denial of Service) org.eclipse.jetty:jetty-io Dependency in Crowd Data Center and Server

This High severity org.eclipse.jetty:jetty-io Dependency vulnerability was introduced in versions 5.0.0, 5.1.0, and 5.2.0 of Crowd Data Center and Server. This org.eclipse.jetty:jetty-io Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

MAL-2024-1209 Malicious code in recxn-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09ab1a9ec173dddfe29440874a55934c0478e3e08950a7b36638ae2a7127f88e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1193 Malicious code in package-dfgpd-dfgdfg-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8791e7d1940111ec98262882ec9b4ba3bc94bd1b739f62c31ba48ae31e6310bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1191 Malicious code in metacord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f338d105ac1426320dac30e9498ef2e004b76bc148bb13ba645d97ab8fae58a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1149 Malicious code in hessskinchecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dab9a6776a7691f00229937277c2daff6e5424beadea56b66d3b8ec5f201932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1151 Malicious code in win-regi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccc75e5c2e245bb5cc93616df8345a066ad6a7b060d605404d8036f4a272b45b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1113 Malicious code in action-and-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df7d68df29c8d0451564e890d6a9e4e49ed0d52b81b51c81ab79c1bb6fabac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1114 Malicious code in babel-preset-slick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d6e762e33c8c67e6c07bf7d934a1ee9d34e1d618d785817f5635d5e08a2c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-W5WX-6G2R-R78Q Nuclei allows unsigned code template execution through workflows

Overview A significant security oversight was identified in Nuclei v3, involving the execution of unsigned code templates through workflows. This vulnerability specifically affects users utilizing custom workflows, potentially allowing the execution of malicious code on the user's system. This...

MAL-2024-1101 Malicious code in test12323123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ecbea51c0b15a8930a95267ce5c77d278fbf6de9907b7550db4f80b3958ca76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1083 Malicious code in liquity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e4b0656498122960a3dfed802920c3ae8d545955f077fb818b5f9995a5964e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1073 Malicious code in dismissprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e57b2c157fbb4ae27dd1ea7ddb8c370c151171838b953706151a60c3399716b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1062 Malicious code in unity-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d7a62539b563d36148b212913759293a68090ffa3505239a01cd432698619c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Meta Abandons Hacking Victims, Draining Law Enforcement Resources, Officials Say

A coalition of 41 state attorneys general says Meta is failing to assist Facebook and Instagram users whose accounts have been hacked—and they want the company to take “immediate action.”...

MAL-2024-1054 Malicious code in win32crypted (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a20fa9d2f01c5cc1893bbe4cfe5659f6bba9ce4dff54b741dbc46f5ded5402dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...