PT-2024-31152 · Unknown · Best Free Law Office Management

Name of the Vulnerable Software and Affected Versions: Best Free Law Office Management Software version 1.0 Description: The issue allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the "kortex lite/control/register case.php" interface. This...

PT-2024-39132 · Unknown · Itsourcecode Tailoring Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Tailoring Management System version 1.0 Description: A critical issue was found in the itsourcecode Tailoring Management System, affecting an unknown functionality of the file ssms.php. The manipulation of the customer argument...

MAL-2024-8113 Malicious code in @diotoborg/adipisci-esse-tempore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 340090195687cd2f5be731ab72559e1af554f09b2857bb7c48dd3df71b912dc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8114 Malicious code in @diotoborg/adipisci-placeat-iure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 684fd5516042ed67c50c7de767ec0778fc7c6a2f3247452a93078111ce8d2a6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8145 Malicious code in @diotoborg/aspernatur-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d0433b0f8f007144572efa522ecd7a1776c4ac4f5c364769615b809f6689bea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8345 Malicious code in @diotoborg/fugiat-doloremque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50b98af6f7ad9b97ea1c45b4495a356f11d635b3f3138e30e3659bdd79f8af7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8700 Malicious code in @diotoborg/voluptatibus-impedit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f899aca45c84128990918b2b6dd9dd004f1c68c1247ccbe88cd9e4d2bd4641ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8277 Malicious code in @diotoborg/earum-eligendi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0ae84c0ec93eca67eb10f726fc5ca3fef4473e6c37d575a942864f940783f1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8275 Malicious code in @diotoborg/eaque-reprehenderit-exercitationem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60da51a3fb4f4bc19fb085547cc150117eca9f9d245b3677c7314c0c38aa1fdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8399 Malicious code in @diotoborg/laborum-recusandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 078e2e1f34f5bbc720834781bd58942eaad607e424888cd8c33cdaaaf56854b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8579 Malicious code in @diotoborg/quo-neque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8feabd1d57e9c96d3054cd7555e65787cba38d8f395639ba801d91949efb4ff3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-30334

Name of the Vulnerable Software and Affected Versions StylemixThemes Cost Calculator Builder versions 3.2.15 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows unauthorized database...

PT-2024-7268

Name of the Vulnerable Software and Affected Versions: CPython versions prior to 3.13.0 Description: The issue is related to the 'http.cookies' standard library module in CPython. When parsing cookies that contain backslashes for quoted characters in the cookie value, the parser uses an algorithm...

PT-2024-38540 · Secom · Dr.Id Access Control System

Name of the Vulnerable Software and Affected Versions: Dr.ID Access Control System from SECOM versions up to 3.6.2 Description: The issue allows unauthenticated remote attackers to inject SQL commands, enabling them to read, modify, and delete database contents due to improper validation of a...

MAL-2024-8005 Malicious code in weather-git-premium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a419bcafcf4cc51eca7864411e170f1b2a0f4eee6806b86daea083ac9f6536f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-28879 · Unknown · Puneethreddyhc Online Shopping System

Name of the Vulnerable Software and Affected Versions: PuneethReddyHC Online Shopping system advanced version 1.0 Description: The issue allows an attacker to execute arbitrary code. An unauthenticated remote attacker can manipulate the address1 variable in the "register.php" endpoint...

MAL-2024-7702 Malicious code in cloudhost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06d8e1813e9e9ae1dd5749ee815f32696a16d538138675ee92e5cd2272e6c870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7149 Malicious code in @zitterorg/cum-non (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11602bb1210f3dda60b24294fab56bd0353ac845e73d9711cde4936c2de87a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7145 Malicious code in @zitterorg/cum-commodi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00b91d9ca0c8046e1c9b0a90c184e254286a6bc25f5262414712815f86a80e53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1675 Malicious code in near-linkdrop-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ff40b77a91a8e45cd8e9541c0872d1e97a5e365768e2e6f34550d24f8c02fa0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...