Malicious code in newtheme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37975c22c99a1fe8dd968985aa358d4982778370c1eae16b94fd12afb266fc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2692 Malicious code in newtheme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37975c22c99a1fe8dd968985aa358d4982778370c1eae16b94fd12afb266fc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in newtheme

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2014-100029

Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library GDL 4.2 allow remote attackers to read arbitrary files via a .. dot dot in the 1 newlang or 2 newtheme parameter...

CVE-2014-100029

Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library GDL 4.2 allow remote attackers to read arbitrary files via a .. dot dot in the 1 newlang or 2 newtheme parameter...

PT-2015-3636

Name of the Vulnerable Software and Affected Versions Ganesha Digital Library GDL version 4.2 Description The issue concerns multiple directory traversal vulnerabilities. These vulnerabilities allow remote attackers to read arbitrary files by utilizing a .. dot dot in specific parameters. The...

CVE-2014-100029: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library GDL 4.2 allow remote attackers to read arbitrary files via a .. dot dot in the 1 newlang or 2 newtheme parameter...

CVE-2007-2780: Exposure of Sensitive Information to an Unauthorized Actor

PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invalid newtheme parameter, which reveals a path in an error message...

[Full-disclosure] PsychoStats 3.0.6b and prior

newtheme variable only expects "sane" behaivor, no arguement or an arguement with any special character, etc.. will cause it to error and display the full path to $pathtohlstats/includes/smarty/Smarty.class.php $pathtohlstats/server.php?newcss=styles.css&newtheme=00 Ex: Warning: Smarty error:...