Malicious code in sc-pattern-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cbcdc7facabe72ef42307c4747ea188fbeec7c3f4f2203bfab0770204dc01c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-16090 · WordPress · Compact Wp Audio Player

Name of the Vulnerable Software and Affected Versions: Compact WP Audio Player plugin for WordPress versions up to, and including, 1.9.13 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the sc embed player shortcode. This allow...

MAL-2024-9826 Malicious code in sc-qucak (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sc-qucak (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sc-quakq (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sc-quakc (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9823 Malicious code in sc-quac (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sc-quac (npm)

--- -= Per source details. Do not edit below this line.=-...

INE Security Wins 2024 SC Excellence Award

Cary, North Carolina, 18th September 2024, CyberNewsWire...

DEBIAN-CVE-2024-46682

In the Linux kernel, the following vulnerability has been resolved: nfsd: prevent panic for nfsv4.0 closed files in nfs4showopen Prior to commit 3f29cc82a84c "nfsd: split scstatus out of sctype" statesshow relied on sctype field to be of valid type before calling into a subfunction to show conten...

INE Security Named 2024 SC Awards Finalist

Cary, North Carolina, 30th August 2024, CyberNewsWire...

Tenable Security Center Multiple Vulnerabilities (TNS-2024-13)

According to its self-reported version, the Tenable Security Center running on the remote host is 6.2.1, 6.3.0 or 6.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-13 advisory. - Security Center leverages third-party software to help provide underlying...

sistemas.epagri.sc.gov.br Cross Site Scripting vulnerability OBB-3953385

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[R1] Stand-alone Security Patch Available for Tenable Security Center versions 6.2.1, 6.3.0 and 6.4.0: SC-202407.1

R1 Stand-alone Security Patch Available for Tenable Security Center versions 6.2.1, 6.3.0 and 6.4.0: SC-202407.1 Arnie Cabral Tue, 07/09/2024 - 08:33 Security Center leverages third-party software to help provide underlying functionality. One of the third-party components PHP was found to contain...

MAL-2024-5963 Malicious code in sc-concurrent-log-handler (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sc-concurrent-log-handler (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-35743

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Siteclean SC filechecker allows Path Traversal, File Manipulation.This issue affects SC filechecker: from n/a through 0.6...

CVE-2024-35743 WordPress SC filechecker plugin <= 0.6 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Siteclean SC filechecker allows Path Traversal, File Manipulation.This issue affects SC filechecker: from n/a through 0.6...

CVE-2024-35743 WordPress SC filechecker plugin <= 0.6 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Siteclean SC filechecker allows Path Traversal, File Manipulation.This issue affects SC filechecker: from n/a through 0.6...

CVE-2024-35743

Technical details are not publicly available in the provided documents for CVE-2024-35743. Monitor for updates on affected product/version, root cause, impact, and remediation as more authoritative disclosures become available.