MAL-2024-8441 Malicious code in @diotoborg/nam-adipisci-fuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a50dd8df10e9dfb8c76c18bbb3f6af7e19dc0b2375d1d8e37204f39247b5df08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8443 Malicious code in @diotoborg/nam-quod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ce2c3c4ed77a6e2eb84e09d7263200ad248447dc223050c80c3f7b82e88c33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/nam-adipisci-fuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a50dd8df10e9dfb8c76c18bbb3f6af7e19dc0b2375d1d8e37204f39247b5df08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/explicabo-nam-iste (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a8c3477467ae5df49c5cf38468d094d1ec1c0573220d791e850ef87a7e09df5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8328 Malicious code in @diotoborg/explicabo-nam-iste (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a8c3477467ae5df49c5cf38468d094d1ec1c0573220d791e850ef87a7e09df5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/nam-occaecati (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26ec69cf500f76304c63e4e1760c423a6d7f2438e57851b92d1cf18a561ab95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8444 Malicious code in @diotoborg/nam-voluptates-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b1c78d692dd69047016cb20f6be4ee4e759c177708dc8dd7487fd20fa36f3c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/autem-nam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b19b23c3b09fd8b6c17a6abbff64fd4c36787818abb73f7ba3b28abd91f478d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/temporibus-nam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4062c84584c3a1ba8d67cad3c6646437972e0ef565f51476531e455d04d087d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8165 Malicious code in @diotoborg/autem-nam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b19b23c3b09fd8b6c17a6abbff64fd4c36787818abb73f7ba3b28abd91f478d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8450 Malicious code in @diotoborg/necessitatibus-nam-tempora (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c80b9b98ee22a7d207aa4ecd92e3b41e5d2f2fa268bfcaef44103efbba2bfbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress GiveWP plugin <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions vulnerability

Insecure Direct Object Reference to Authenticated GiveWP Worker+ Arbitrary Post Actions vulnerability discovered by Thanh Nam Tran in WordPress Plugin GiveWP versions = 3.13.0...

WordPress GiveWP Plugin <= 3.13.0 is vulnerable to Insecure Direct Object References (IDOR)

Software GiveWP Type Plugin Vulnerable versions = 3.13.0 Fixed in 3.14.0 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-5977 Patch priority Low CVSS severity Low 5.4 Developer Liquid Web / StellarWP PSID 3e3c50f20b4c Credits Thanh Nam Tra...

WordPress JSON API User plugin <= 3.9.3 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Thanh Nam Tran in WordPress Plugin JSON API User versions = 3.9.3...

MAL-2024-7298 Malicious code in @zitterorg/nobis-nam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ef4e0ae0c6d37770a2df5c89ea35daccb5a3f37e286c2f1cf0d208b08786862 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7386 Malicious code in @zitterorg/sunt-vel-nam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 371f246d07711279b08bc5beabd351c9a42f3f402101922efd34fe1ea0f1158e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/ipsum-nam-facere (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e84d8aa74f5b0ca736759ba4d0399ff51d8a93e96b4a6e1b960fe75e21f9530 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Download Manager plugin <= 3.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_modal_login_form Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via wpdmmodalloginform Shortcode vulnerability discovered by Thanh Nam Tran in WordPress Plugin Download Manager versions = 3.2.93...

Malicious code in @juiggitea/nulla-nam-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74cab9b6095ac860630539f06ea16b5ed45afcb6553c83584bc7fa75848d939b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress User Registration plugin <= 3.2.0.1 - Missing Authorization to Privilege Escalation vulnerability

Missing Authorization to Privilege Escalation vulnerability discovered by Thanh Nam Tran in WordPress Plugin User Registration versions = 3.2.0.1...