Malicious code in react-intl-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1232c7e53c78dc2566d0d6cfcc12422d7d7debe38b729c855588cca5796d0e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5650 Malicious code in react-intl-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1232c7e53c78dc2566d0d6cfcc12422d7d7debe38b729c855588cca5796d0e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@atlaskit/editor-plugin-media-editing (>=0.1.0, <=1.2.1) potentially affected by unknown CVE via react-intl-next (0.0.1-security)

react-intl-next NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-intl-next and may be impacted: - @atlaskit/editor-plugin-media-editing =0.1.0, =1.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5650...

Malicious code in react-monorail-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f0a9004be0e59dea57780bc6d6ecf6d8d2cced159161b7b13030c87592bfb0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5654 Malicious code in react-monorail-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f0a9004be0e59dea57780bc6d6ecf6d8d2cced159161b7b13030c87592bfb0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in polaris-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb96b8a0229b6d2dac86029266a0106019f5ee4ffbe68e10a5a88a39865d60f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5401 Malicious code in polaris-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb96b8a0229b6d2dac86029266a0106019f5ee4ffbe68e10a5a88a39865d60f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atomic-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f545fc86c099730890c2468a3b7fc0a7fd60e890c19cfd63721aea0c617718d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1163 Malicious code in atomic-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f545fc86c099730890c2468a3b7fc0a7fd60e890c19cfd63721aea0c617718d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Learn Cybersecurity with Palo Alto Networks Through this PCCSA Course @ 93% OFF

In the world of cybersecurity, reputation is everything. Most business owners have little understanding of the technical side, so they have to rely on credibility. Founded back in 2005, Palo Alto Networks is a cybersecurity giant that has earned the trust of the business community thanks to its...

PT-2025-8643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel's dm-log code has been identified, where the region bitmap size is rounded up to 32 bits, but the allocated region is accessed using unsigned long pointers by t...

Stack overflow

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer overflow vulnerability affects PJSIP users that use STUN in their...

CVE-2022-32195

Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL...

CVE-2022-32195

Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL...

PT-2022-21146

Name of the Vulnerable Software and Affected Versions Open edX platform versions prior to 2022-06-06 Description The issue allows for XSS via the next parameter in the logout URL. Recommendations For versions prior to 2022-06-06, update to a version released after 2022-06-06 to resolve the issue...

CVE-2022-32195: Improper Neutralization of Input During Web Page Generation

Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL...

PT-2022-7890

Name of the Vulnerable Software and Affected Versions The Next Generation of Genealogy Sitebuilding versions up to 11.1.0 Description A critical issue has been found in the processing of the file /timeline2.php, where the manipulation of the primaryID argument leads to sql injection. The attack c...

CVE-2017-20017: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in The Next Generation of Genealogy Sitebuilding up to 11.1.0. This issue affects some unknown processing of the file /timeline2.php. The manipulation of the argument primaryID leads to sql injection. The attack may be initiated...

Malicious code in next-plugin-normal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a774bb288c6816fa84250343f6d4d0e0e237b278afc1cbe10e3ea47cd7057772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4825 Malicious code in next-plugin-normal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a774bb288c6816fa84250343f6d4d0e0e237b278afc1cbe10e3ea47cd7057772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...