MAL-2024-712 Malicious code in wlwz-2312-6002 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fa67743cdaaa5fb274a34fcaf974acd46c3eef77eb72b6412f2ad215b625790 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-700 Malicious code in wlwz-2312-5808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d50b1e7740a7ec2fc82b63bf66ef1da6ef987279944519383d6e79440bccf12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-604 Malicious code in wlwz-2312-4802 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96e271afa550a130677affbf4460afe6380a6a7eebd04e245bd946811ae6c00d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-540 Malicious code in wlwz-2312-4101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46594e9ae269ec604da5073cb6386a1e132978f980b8b43e87ecddd64756b424 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-422 Malicious code in wlwz-2312-2800 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30d10037b506d53ce78827697987a27ffcabbe7ed7bdfcb53be766bac27b7f38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-272 Malicious code in wlwz-2312-1103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7eb3cad0c6be5185b444f2611f3c1f4277f2bc0edb5864196cbdd2c41a093925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-249 Malicious code in wlwz-2312-0807 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19c60876766fc6be6c4d3c052be321074be7036e5dd3934244344c1c6d98ef3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-198 Malicious code in wlwz-2312-0301 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa89b78d73d080fea21c86e8f76bb8db1113718a8c3464a1457a4e71aab57af9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-226 Malicious code in wlwz-2312-0602 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3803906062c3060ef288f681d33d9012735681736f1fd8e73e4d99866c572a11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-205 Malicious code in wlwz-2312-0308 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a5d2bd970f9963c2640cdc75e9c11b18a04ad81064be46fef18cfe0db533a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-526 Malicious code in wlwz-2312-3905 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85d95981fea3ccb3d5c3180f7b33ec927c5738d26968302a7a2e0cb87e903950 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-353 Malicious code in wlwz-2312-2003 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6c8932c831e59a44db22fc2cf606a386ce5987461f78dc591a4bf14b1a6fee9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-637 Malicious code in wlwz-2312-5108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 191cf132bfeab6a3b4b89a0c9a8002a00e28f75d55685e2e8438aeb21f59d362 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-112 Malicious code in djs-selfbot-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3afe9942efa3f5082e6e6393ab078295d7c051c7f113d3ff2ca4e44eb520d9ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Input validation

Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, when a user changes their login password in Uptime Kuma, a previously logged-in user retains access without being logged out. This behavior persists consistently, even after system restarts or browser restarts. Th...

CVE-2023-49804

Summary: CVE-2023-49804 affects Uptime Kuma and precedes version 1.23.9. When a user changes their login password, a previously logged-in user remains authenticated and can access the platform, an issue that persists across system/browser restarts. This vulnerability can expose sensitive data due...

CVE-2023-49804 Uptime Kuma Password Change Vulnerability

Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, when a user changes their login password in Uptime Kuma, a previously logged-in user retains access without being logged out. This behavior persists consistently, even after system restarts or browser restarts. Th...

CVE-2023-49804 Uptime Kuma Password Change Vulnerability

Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, when a user changes their login password in Uptime Kuma, a previously logged-in user retains access without being logged out. This behavior persists consistently, even after system restarts or browser restarts. Th...

MAL-2023-8608 Malicious code in moonpig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bf064eedf0d80bc14ce31e1deee2fd824472437a9fa79fb15602d6b09c478d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8606 Malicious code in todo-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc3036374d0687be9d2c3ce1a73b73181d87ad3e1a67d8368bb460150148c5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...