MAL-2024-11099 Malicious code in spid-gc-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad2d0454e042159c3e89571e4e8154f79b74c2c9e8f588592a42ffb54b87dc69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spid-gc-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad2d0454e042159c3e89571e4e8154f79b74c2c9e8f588592a42ffb54b87dc69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spid-growth-notifier-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cda56c0e08a98c9eabbe82bae2f3b70c122216d4ba4c53b799179a04061beedd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11100 Malicious code in spid-growth-notifier-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cda56c0e08a98c9eabbe82bae2f3b70c122216d4ba4c53b799179a04061beedd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10864 Malicious code in spid-sharing-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c50247128ddc6b0f537f31cc3dc2ab87a15e41c40657a63a978fa0037bd8f1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spid-sharing-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c50247128ddc6b0f537f31cc3dc2ab87a15e41c40657a63a978fa0037bd8f1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-44988 net: dsa: mv88e6xxx: Fix out-of-bound access

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If an ATU violation was caused by a CPU Load operation, the SPID could be larger than DSAMAXPORTS the size of mv88e6xxxchip.ports array...

CVE-2024-44988 net: dsa: mv88e6xxx: Fix out-of-bound access

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If an ATU violation was caused by a CPU Load operation, the SPID could be larger than DSAMAXPORTS the size of mv88e6xxxchip.ports array...

WordPress WP SPID Italia Plugin <= 2.4.3 is vulnerable to Cross Site Scripting (XSS)

Software WP SPID Italia Type Plugin Vulnerable versions = 2.4.3 Fixed in 2.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID d8c2a46f0b6d Credits Rafie Muhammad Patchstack Required...

WordPress WP SPID Italia plugin <= 2.3.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP SPID Italia plugin versions = 2.3.4. Solution Update the WordPress WP SPID Italia plugin to the latest available version at least 2.3.5...

WordPress WP SPID Italia plugin <= 2.3.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP SPID Italia plugin versions = 2.3.4. Solution Update the WordPress WP SPID Italia plugin to the latest available version at least 2.3.5...

Spid 1.3 lang_path File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14208/info SPiD is a gallery management application written in PHP. SPiD is prone to a remote file include vulnerability, due to lack of validation of user input. An attacker may leverage this issue to execute arbitrary...

SPiD 1.3.1 Scan_Lang_Insert.PHP Local File Include Vulnerability

No description provided by source...

Directory traversal

Directory traversal vulnerability in scanlanginsert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary files via the lang parameter...

CVE-2006-0976

Directory traversal vulnerability in scanlanginsert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary files via the lang parameter...

CVE-2006-0976

Directory traversal vulnerability in scanlanginsert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary files via the lang parameter...

CVE-2006-0976

The CVE-2006-0976 entry concerns a directory traversal vulnerability in Boris Herbiniere-Seve SPiD 1.3.1. The vulnerability is triggered via the lang parameter in scan_lang_insert.php, allowing remote attackers to read arbitrary files. Affected software/function: SPiD 1.3.1, scan_lang_insert.php....

NSAG-201-25.02.2006.txt

Advisory: NSAG-¹201-25.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: SPiD v1.3.1 Site of manufacturer: http://spid.adnx.net/ The status: 19/01/2006 - Publication is postponed. 14/02/2006 -...

NSA Group Security Advisory NSAG-№201-25.02.2006 Vulnerability SPiD v1.3.1

Advisory: NSAG-№201-25.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: SPiD v1.3.1 Site of manufacturer: http://spid.adnx.net/ The status: 19/01/2006 - Publication is postponed. 14/02/2006 -...

SPiD 1.3.1 - 'Scan_Lang_Insert.php' Local File Inclusion

source: https://www.securityfocus.com/bid/16822/info SPiD is prone to a local file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of this issue may facilitate the unauthorized viewing of files and executio...