Malicious code in matlotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d6be1dfc396c618352f2e1c3b411654c89c618a47b5c2ffd778fd51a6e18188d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifulsouup4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f8e80f99330a5835bc3bbf4e44384e1b14ef516af8e8eb82cdb70135dc0132bf Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in coloramma (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2f90a2e427f8c8e254842c99fca366b27770d00d55ff95b9c9f1e46b3f1811c6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in webockets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 21837c454821043a5649b15a4acc088e2427d65c57a3781c3f97b03b9bdb3423 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptocompar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0803cd491ff3a442a1cab188bbd4870857b431850d9e29b60fbc8f546973ef88 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptocomprae (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4e29fff7df870f353d6a62a0418b0904f02fabe855f4df6a2f0e613e81a299fc Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in crytpocompare (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d089412c803671b069fd82ff5387cf5449d11dc17f3aa7a7295527a06326d0db Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptofed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 12ac1729f8bb663e2bf6a2697a261bb53074fbb0d4196f2cc332cb30cd259ef1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptofeeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 13b429ad70d1963002327ce511d7f329abe9ce3031458f645c0f540d78e511a4 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in frqtrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4e9a6f5c4e1499c80fad35d26f4e88bc0da564817b89bc70ca6aade3721002c8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

WordPress Enable Media Replace Plugin < 4.0.2 is vulnerable to Arbitrary File Upload

Software Enable Media Replace Type Plugin Vulnerable versions 4.0.2 Fixed in 4.0.2 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2023-0255 Patch priority High CVSS severity High 9.1 Developer ShortPixel PSID 1a8eac52cb81 Credits dc11 Required privilege Author Published 1...

GSD-2023-1000377 btrfs: handle case when repair happens with dev-replace

btrfs: handle case when repair happens with dev-replace This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload

The plugin does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites. 1 As an Author, upload a picture via http://vulnerable-site.tld/wp-admin/upload.php 2 Press on the new picture's thumbnail to see the attachment's details 3...

Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload

The plugin does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites. PoC 1 As an Author, upload a picture via http://vulnerable-site.tld/wp-admin/upload.php 2 Press on the new picture's thumbnail to see the attachment's detai...

postgresql: Extension scripts replace objects not belonging to the extension.

A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the objec...

postgresql: Extension scripts replace objects not belonging to the extension.

A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the objec...

DEBIAN-CVE-2022-34481

In the nsTArrayImpl::ReplaceElementsAt function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

CVE-2022-41267

CVE-2022-41267 affects SAP BusinessObjects Platform 4.2 (420) and 4.3 (430). A server‑side request forgery vulnerability lets an attacker with normal BI user privileges upload/replace any file on the server at the OS level, enabling full system control and causing high impact to confidentiality, ...

CVE-2022-3850

The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace arbitrary string in database tables via a CSRF attack...

CVE-2022-2311

The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue...