GHSA-G872-JWWR-VGGM Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment

Description: Remote Code Execution Vulnerability has been identified in the Message module of the Admidio Application, where it is possible to upload a PHP file in the attachment. The uploaded file can be accessed publicly through the URL admidiobaseurl/admmyfiles/messagesattachments/filename. Th...

MAL-2024-7850 Malicious code in ent-widget-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7313a06ff628db941fa9330887fdea43ce979086e4ce11ef7d0c0041a9a0f9b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7854 Malicious code in testalonimaurice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80ad03064c65acf925c16881cf35e79cbd2aac0bda615b6793bdf329bdeccccf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7851 Malicious code in income_access_npm_config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51d9955aae12e69e264784bcf65382bde7741326c5841d4a06389474e6daa09b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7820 Malicious code in sendapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293c4e6568da723c801c3e4e60c18d4384908f054f67dfce8cc6769a5dac1f74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7807 Malicious code in webjsflood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41cce5996b48499aa091e08036886fb6c4b75bad613669a6f278e24b01bc11d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7798 Malicious code in smart-input-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d35a2894a65ccf5f422531f46846b2cc71d5e0e28a3e0d7b6e9ed1b0daa6a69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7760 Malicious code in toolbox-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08eb63c88d757784c7886fd9e365d836ff111c5c27741eef78fed201a5e485e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7764 Malicious code in evil-hitcon-2024 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbe1b43a902dc36ccbd6d7dc4e8f50682dc9580bc0bd95e4a572151f480e3116 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zonduutest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd104d918d42d9fb61de1d1e24a2c632f2bf39f504ee6c16322e55ca3c977b16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7756 Malicious code in moto-test-int (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2387221aed62494dae4d55fdace72a03b718b13dd18dec7ea97b0df19d4865f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7736 Malicious code in crypto-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1553fb7d7d1ca058c26337308435b8b0bd7cab9f04546e8c72e9799ebd4dda5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sap-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f7b53e22f89739f4853a3994baf6285d83c6de7670a14cefcbe1a1df754163a The OpenSSF Package Analysis project identified 'sap-alt' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-7522 Malicious code in sap-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58420a49ed777d835cee58dafa044a3b2960aae4ff06d85f920dd45618e5f324 The OpenSSF Package Analysis project identified 'sap-agent' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7714 Malicious code in komcaxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e16d460077fe5867d93cdb883add5647909a7ab4fd8fbd15016821bf60682b9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7722 Malicious code in tilda-date-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b98b7d3c762a3af730da420104e9016e9ca64e0313f7195afe1a8b29be029275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flammerxdjson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8b6b80199d2f6500f4b47a77309fa995e34a633ea2fa5f5e265d0b1ffb7b085 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7699 Malicious code in bootrun (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe0b4ba6593b11b85748383f8075db213c342a34223f8a3fda3f166008e5eff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7700 Malicious code in bootstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67d05a4e5eb1e1c884d16a1850fa6161acc8d1de6203726a6cd4e1b16b7ecfe0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7707 Malicious code in fontawesome-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff495c6fc65ef7548f0b56a04f0efd1d0c2877ee7b200e306156166e1263f644 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...