4 matches found
Malicious code in oauth-connect-popup (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2779 Malicious code in oauth-connect (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49c48193ba50bb4ead1e212925eab8873e7e4ad7fa834d41e7626bb4e5036f3 package.json declares a preinstall: node index.js hook that fires automatically on npm install. index.js collects installer-side data — os.hostname,...
Malicious code in oauth-connect (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49c48193ba50bb4ead1e212925eab8873e7e4ad7fa834d41e7626bb4e5036f3 package.json declares a preinstall: node index.js hook that fires automatically on npm install. index.js collects installer-side data — os.hostname,...
PT-2021-15711
Name of the Vulnerable Software and Affected Versions: Ninja Forms Contact Form WordPress plugin versions prior to 3.4.34 Description: The issue concerns an open redirect vulnerability due to the use of a user-supplied redirect parameter without adequate protection. This is related to the wp ajax...