MAL-2024-9134 Malicious code in branch-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce05613edf65a4a8af219c02f9ea8ec4563b9d66c2d4d824617dcc69d4bca211 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9133 Malicious code in braintree_express_example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d099bf20fe3b1d17efadfd0e185e8a178edf635e5754d26c3710e5b99c2a1404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-29676 · Unknown · Tem Opera Plus Fm Family Transmitter

Name of the Vulnerable Software and Affected Versions: TEM Opera Plus FM Family Transmitter version 35.45 Description: The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the...

PT-2024-9226 · 2N · 2N Access Commander

Name of the Vulnerable Software and Affected Versions: 2N Access Commander versions 3.1.1.2 and prior Description: The issue is related to an Insufficient Verification of Data Authenticity, which could allow an attacker to escalate their privileges and gain root access to the system. This...

PT-2024-32086 · Helpdesk · Helpdesk

Name of the Vulnerable Software and Affected Versions: HelpDeskZ version 2.0.2 Description: A cross-site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field of Custom Fields message box. This issue potential...

PT-2024-31976 · Unknown · Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: Best House Rental Management System version 1.0 Description: The issue concerns an arbitrary file upload vulnerability in the signup function of the file rental/admin class.php. This could potentially lead to system compromise. There is no...

PT-2024-23818 · Open Networking Foundation · Libfluid

Name of the Vulnerable Software and Affected Versions: libfluid version 0.1.0 Description: The issue is an Out-of-bounds Read vulnerability in the Open Networking Foundation ONF libfluid, specifically in the libfluid msg modules. It is associated with the program routines fluid...

PT-2024-31152 · Unknown · Best Free Law Office Management

Name of the Vulnerable Software and Affected Versions: Best Free Law Office Management Software version 1.0 Description: The issue allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the "kortex lite/control/register case.php" interface. This...

PT-2024-39132 · Unknown · Itsourcecode Tailoring Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Tailoring Management System version 1.0 Description: A critical issue was found in the itsourcecode Tailoring Management System, affecting an unknown functionality of the file ssms.php. The manipulation of the customer argument...

MAL-2024-8113 Malicious code in @diotoborg/adipisci-esse-tempore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 340090195687cd2f5be731ab72559e1af554f09b2857bb7c48dd3df71b912dc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8114 Malicious code in @diotoborg/adipisci-placeat-iure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 684fd5516042ed67c50c7de767ec0778fc7c6a2f3247452a93078111ce8d2a6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8145 Malicious code in @diotoborg/aspernatur-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d0433b0f8f007144572efa522ecd7a1776c4ac4f5c364769615b809f6689bea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8700 Malicious code in @diotoborg/voluptatibus-impedit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f899aca45c84128990918b2b6dd9dd004f1c68c1247ccbe88cd9e4d2bd4641ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8345 Malicious code in @diotoborg/fugiat-doloremque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50b98af6f7ad9b97ea1c45b4495a356f11d635b3f3138e30e3659bdd79f8af7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8277 Malicious code in @diotoborg/earum-eligendi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0ae84c0ec93eca67eb10f726fc5ca3fef4473e6c37d575a942864f940783f1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8275 Malicious code in @diotoborg/eaque-reprehenderit-exercitationem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60da51a3fb4f4bc19fb085547cc150117eca9f9d245b3677c7314c0c38aa1fdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8399 Malicious code in @diotoborg/laborum-recusandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 078e2e1f34f5bbc720834781bd58942eaad607e424888cd8c33cdaaaf56854b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8579 Malicious code in @diotoborg/quo-neque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8feabd1d57e9c96d3054cd7555e65787cba38d8f395639ba801d91949efb4ff3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-30334

Name of the Vulnerable Software and Affected Versions StylemixThemes Cost Calculator Builder versions 3.2.15 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows unauthorized database...

PT-2024-7268

Name of the Vulnerable Software and Affected Versions: CPython versions prior to 3.13.0 Description: The issue is related to the 'http.cookies' standard library module in CPython. When parsing cookies that contain backslashes for quoted characters in the cookie value, the parser uses an algorithm...