Malicious code in fluent-plugin-container-logs_filter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in danger-ios-logs (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6852 Malicious code in danger-ios-logs (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6848 Malicious code in custom-logs (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in custom-logs (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in capistrano_rails-logs-tail (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in capistrano_logs (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6811 Malicious code in capistrano_logs (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6741 Malicious code in aws_logs (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in console-logs (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4992 Malicious code in console-logs (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Aimeos Security Breach

Aimeos is an open source e-commerce framework for online stores from Aimeos Open Source. A security vulnerability exists in Aimeos ai-client-html, which stems from a debugging message displaying sensitive information from an environment variable in the error log...

CVE-2024-6104 go-retryablehttp can leak basic auth credentials to log files

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

Multiple Threat Actors Deploying Open-Source Rafel RAT to Target Android Devices

Multiple threat actors, including cyber espionage groups, are employing an open-source Android remote administration tool called Rafel RAT to meet their operational objectives by masquerading it as Instagram, WhatsApp, and various e-commerce and antivirus apps. "It provides malicious actors with ...

WordPress WP Logs Book plugin <= 1.0.1 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin WP Logs Book versions = 1.0.1...

WordPress WP Logs Book plugin <= 1.0.1 - Multiple CSRF vulnerability

Multiple CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP Logs Book versions = 1.0.1...

CVE-2024-4474

The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-4477

The WP Logs Book WordPress plugin through 1.0.1 does not sanitise and escape some of its log data before outputting them back in an admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting...

CVE-2024-4474

The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-4477

The WP Logs Book WordPress plugin through 1.0.1 does not sanitise and escape some of its log data before outputting them back in an admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting...