Malicious code in @diotoborg/eum-est-nulla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f99d9f412b7c4e4c961d7d7dd8c72cfdf918ab2963b8aab46d5b5b52f020602c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quos-accusantium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dac7a2478a31d522e124695c39141c77dcaf1adb0cdd52d4f5ef19ddda2669a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/recusandae-reprehenderit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4df9200783529df10f29b4fe97e56a1cf7c77bfaafbd76045d1f3563fced8d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/exercitationem-culpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e4a181723ba2ff9df4ea976b7cb5405a17ca9b7e949877ccc329ddcdea9d316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/optio-provident-omnis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc453c5b757978738907b9a9b8be9dfb6793b8cb4ebe72a90b201983493bd9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/occaecati-porro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5e777faebf47bc26816539986c6201c0bed936306739e2a2fe207a15b5a4b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/necessitatibus-voluptas-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d040370140af8f1fdf35233a8d44ade81b7c8c3561be0b8d4e3788a23a0882a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/ex-repellat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e30f0f24bcabf5b6bce5083307e9ba4d5f6aadd051592bbf5f715d455792651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolor-earum-quia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d700c9e6da7b84a19b42ed2466b0fe8ba51b97a24f185d84dd039164ff501398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/vel-labore-incidunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a51e7a3e943bacf0ec4e05fabbc4d63cd9366774a2777611041e9163b322c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/aliquam-sit-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa6b2f3b6d1068d05ee0c4e214957377943139fbbdfaa14226509d6d609844ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/est-voluptate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 123216ff6075f5c5fd7c70158b40456dc13dd5b468ee52df0fd1491f9c54b71a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Regsvr32.exe (.sct) Command Delivery Server

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Regsvr32.exe .sct Command Delivery Server', 'Description' = %q This module uses the Regsvr32.exe Application Whitelisting Bypass technique as a w...

Insecure Direct Object Reference (IDOR)

in2code/powermail is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to insufficient validation of the mail parameter in the confirmationAction of the Powermail extension, allowing an unauthenticated attacker to display user-submitted data of all forms persisted by t...

Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns

Threat actors are actively exploiting a now-patched, critical security flaw impacting the Atlassian Confluence Data Center and Confluence Server to conduct illicit cryptocurrency mining on susceptible instances. "The attacks involve threat actors that employ methods such as the deployment of shel...

Malicious code in copilot-web-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbb28669371353c111a05f7fb6bb2803179610b8ccec893590a34d2343e90fc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mp-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cff4fab9afd0251fc2a7551653c7605a21ecffc47bcfee194740e479aff3979 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-messages-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 566f2539409828163b03e79534cea7b15424dcda3b8ad2435ab9deba555757e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Powermail TYPO3 extension Broken Access Control in the OutputController

An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due to missing or insufficiently implemented access checks, resulting in Broken Access Control. Depending on the configuration of the Powermail Frontend plugins...

Malicious code in @digital-experience/product (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2c435487f72fee4bd3fad67cf95fb62296a2a78c8e5f4079e9e40dd35493753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...