MAL-2024-10931 Malicious code in ethquer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be4a01e346216859009cd2d1c19373f6df3236bbb32c0b1c98b46bbd3e1a4d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10930 Malicious code in ethcrypro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba9c04349ef6d36952c840a64414c794718cfd5fddd4f2c21355423bd6d36f63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10918 Malicious code in bigumner-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a0ecfa30eaa3a6f615e3a69a8c0fa4b182d52f6632dd44848e5fff7acbdb5ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10917 Malicious code in bignum.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cae8d88da855b7f1d0c7666e2d5ae9cb3e0ef71c476cedabfdd84863420c452 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10941 Malicious code in rana-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1bae57a99608bfda37ef9693c4945c31163d00df2027fe8558eac88c3320ecb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10934 Malicious code in imon-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3e79b6d6a40bed6caf15c5c2efc6da41d06f25fb082db4b3d3964112a091874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10924 Malicious code in dl-testes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d95a4eec24de9c1fcd629f451e4b7a7d855ef958422cf70011bef25928bb7ab1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10922 Malicious code in delta-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d26055bd3522d0ee0e99be091c1c9091ebc165f47a807c39261ddbac77ad67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10915 Malicious code in alif-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09c054a9fdb7c2b20ed0b7838086b67063d75062d681e05edfeb1c377ea19a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10933 Malicious code in fixsolara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72f721f96c41e95f79c4f9d2a12a8d040ae4c360e5d8e429d2ef42be2878121c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10943 Malicious code in solarafix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3903c6aeaa4d35f7f601837d1c232e25462dcc8d210e811feca02652c348e08d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-based-p2p-e2e-latency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 596b12335f8cd6e12055b2a8df2f4afb1a74c9275d3f22a0e21bc003956092ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10537

The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the validateusermetakey function in all versions up to, and including, 2.9.11. This makes it possible for authenticated attackers, with...

CVE-2024-10537

The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the validateusermetakey function in all versions up to, and including, 2.9.11. This makes it possible for authenticated attackers, with...

CVE-2024-10537 WP User Manager – User Profile Builder & Membership <= 2.9.11 - Missing Authorization to Authenticated (Subscriber+) User Meta Key Enumeration

The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the validateusermetakey function in all versions up to, and including, 2.9.11. This makes it possible for authenticated attackers, with...

CVE-2024-10537

CVE-2024-10537: The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized data access due to a missing capability check in validate_user_meta_key() across versions up to and including 2.9.11. This allows authenticated attackers with Subscriber-leve...

WordPress WP User Manager plugin <= 2.9.11 - Missing Authorization to Authenticated (Subscriber+) User Meta Key Enumeration vulnerability

Missing Authorization to Authenticated Subscriber+ User Meta Key Enumeration vulnerability discovered by Tieu Pham Trong Nhan in WordPress Plugin WP User Manager versions = 2.9.11...

mall 安全漏洞

mall is an e-commerce system for macro individual developers, including a frontend mall system and a backend management system. A security vulnerability exists in mall version 1.0.3 and earlier versions, which stems from allowing the use of default encryption keys...

Sentry 安全漏洞

Sentry is an open source bug tracking and performance monitoring platform for developers from Sentry. A security vulnerability exists in Sentry version 24.11.0. An attacker can exploit the vulnerability to obtain IDs and keys...

Logsign Unified SecOps Platform 安全漏洞

Logsign Unified SecOps Platform is a security operations platform from Logsign, Inc. for collecting, storing, analyzing, and responding to security data from a variety of sources. A security vulnerability exists in Logsign Unified SecOps Platform versions prior to 6.4.8 that stems from the use of...