EUVD-2023-30855

Malicious code in bioql PyPI...

CVE-2023-27066

Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attackers to download arbitrary files via Urlhandle...

Malware in mlb-site-core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in mlb-site-core (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9de998c89065e54ad576039f907182866e20268fdbabf834365503931267443d Any computer that has this package install...

CVE-2023-27066

Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attackers to download arbitrary files via Urlhandle...

Directory traversal

Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attackers to download arbitrary files via Urlhandle...

CVE-2023-27066: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attackers to download arbitrary files via Urlhandle...

CVE-2023-27066

Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attackers to download arbitrary files via Urlhandle...

CVE-2023-27066

Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attackers to download arbitrary files via Urlhandle...

CVE-2023-27066

CVE-2023-27066 affects Sitecore Experience Platform versions 10.2 and earlier. A directory traversal vulnerability allows authenticated remote attackers (low privileges) to download arbitrary files via Urlhandle. Base CVSS v3.1: 6.5 (MEDIUM); attack vector NETWORK, authentication required LOW, pa...

Malicious Package

Overview @miro-site/core is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

Malicious code in @miro-site/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca77890c1dc9000f839accc01fdf6d95cbbbe1ee8d5bdf0caa651e3b2d8686d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @miro-site/core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...