Malicious code in lib-defender (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11326 Malicious code in ccs-react-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a19b5e1d7248b1e5a66bcf5c2ae1bae25a94e6948728331d29c1a363881e05b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yelp-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f281d7fb655f7083b4004d10fb257b419c7aeaf1ea0b79636721d4724aec51d9 The OpenSSF Package Analysis project identified 'yelp-lib' @ 17.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11242 Malicious code in yelp-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f281d7fb655f7083b4004d10fb257b419c7aeaf1ea0b79636721d4724aec51d9 The OpenSSF Package Analysis project identified 'yelp-lib' @ 17.1.2 npm as malicious. It is considered malicious because: - The package...

WordPress plugin Library Management System SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

PT-2024-39173

Name of the Vulnerable Software and Affected Versions: The Library Management System – Manage e-Digital Books Library plugin for WordPress versions up to, and including, 3.0.0 Description: The issue is related to SQL Injection via the value parameter of the owt lib handler AJAX action. This is du...

Malicious code in private-lib-bug-bounty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef8c8e73b8b4d3414d06cadfd08f308a41276fe31204d26bc85d1eb566c4923c The OpenSSF Package Analysis project identified 'private-lib-bug-bounty' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

CVE-2024-48080

An issue in aedes v0.51.2 allows attackers to cause a Denial of ServiceDoS via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js...

CVE-2024-48080: Allocation of Resources Without Limits or Throttling

An issue in aedes v0.51.2 allows attackers to cause a Denial of ServiceDoS via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js...

Malicious code in spinal-lib-organ-monitoring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 863fb7f679e57aab2356e5867fe4d9dd25e11f1c8ef2744b2e337bb0384d8696 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11176 Malicious code in spinal-lib-organ-monitoring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 863fb7f679e57aab2356e5867fe4d9dd25e11f1c8ef2744b2e337bb0384d8696 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FreeBSD : jenkins -- Denial of service vulnerability in bundled json-lib (c5dafd73-adfd-11ef-af27-00e081b7aa2d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c5dafd73-adfd-11ef-af27-00e081b7aa2d advisory. Jenkins Security Advisory: Denial of service vulnerability in bundled json-lib Tenable has extracted th...

Malware in seller-rn-mng-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in uatu-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 566dd0cc559f9c7c91efac981b10e952a96fd6064ce67a4281509a3a5d040ca0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in uatu-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11113 Malicious code in uatu-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 566dd0cc559f9c7c91efac981b10e952a96fd6064ce67a4281509a3a5d040ca0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-common-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f725d89d41b69b32bcff68f5c43863001fe8a47bf052f1efac3808dbd56f85f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in react-common-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11071 Malicious code in react-common-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f725d89d41b69b32bcff68f5c43863001fe8a47bf052f1efac3808dbd56f85f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in seller-listing-rn-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...