MAL-2023-386 Malicious code in fca-chat-zach (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7412bfa443afe9140f4865df0e0422e75243e8dce896fe7011126f77567f4001 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-4318 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free vulnerability in the Linux kernel's netfilter: nf tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule,...

MAL-2023-1300 Malicious code in solodev-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1231265823e0166c738416defa7883c13c543b22ed1f2240daa1517f20908741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-169 Malicious code in chand (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b165d316e0532d06752742211fbd52eff257064339129778ee7321ba1acda76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-847 Malicious code in team-atf-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 179a4580009965bf84dbb702d3cc7e4e3c0663e0e5e19ad0be3dc4dad63a5b73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the nft_immediateDestroy() function in the net/netfilter/nft_immediate.c module of the Netfilter subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the nftimmediateDestroy function in the net/netfilter/nftimmediate.c module of the Netfilter subsystem in the Linux operating system is related to incorrect handling of usage counters. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

WordPress DeMomentSomTres Immediate Send Plugin <= 3.201704251244 is vulnerable to Cross Site Scripting (XSS)

Software DeMomentSomTres Immediate Send Type Plugin Vulnerable versions = 3.201704251244 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 395b22880d0c Credits Rafie Muhammad...

WordPress Backup Bolt Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Backup Bolt Type Plugin Vulnerable versions = 1.1.3 Fixed in 1.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6cdb95fd5dfc Credits Rafie Muhammad Patchstack Required...

WordPress Apperr – Android and iOS App builder for WooCommerce and WordPress Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Apperr – Android and iOS App builder for WooCommerce and WordPress Type Plugin Vulnerable versions = 0.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

MAL-2023-199 Malicious code in coingecko-prices (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bee7aadebfb8b0a1f20f634d7079ec48f9ce73ecb3ca8dbf9d4c55cd2c7d402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-457 Malicious code in foxy.io-serverless-functions-on-netlify-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31fcc1352ebaac1135e5fad045763c61fc9666c1968dbd91fe87951dd50882ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-378 Malicious code in fca-anjelocyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72b538eb3ca50febd185d5eda1dc4a20a1e71a7d85ceea735f724a0bacab09db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-381 Malicious code in fca-anjelov5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eba1b88950fffb7a31b0198d26986dd299eec7409c8fa228081e1b9a62ea031e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-100 Malicious code in anjelo-pogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ae3e1d87bbd89236a43688421d25e9529a87f6f5ad872564d2806ba2c6447b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-97 Malicious code in anjelo-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30de88230ce0ff3f6fe0eedbd58411d187242209563a96498e787b4f79dfc7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-415 Malicious code in fca-nemg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e557473b8c1ff6f8b5b9c217b6f2443903cc2ba472e895283488dfcc50a27e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-436 Malicious code in fhr-jake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 332978484d39cfe7467149d4de9ced06cfe5cab362c268c181af479e3f9c73b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-392 Malicious code in fca-dongdev-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56a044be2fd2a7228afdd892e8a361e2f6531ca357252a66cbcea10716ec8c05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-393 Malicious code in fca-dongdz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a178ae400bbd58633f7d8005bd8c591a3adbba417117cba116f6f7a6d97d569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-749 Malicious code in rqzax-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a84c5b52ec28f42cffc2ec18e27f39dc1c908add4471e1ae31eeea8e752e07e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...