Malicious code in ac-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cafbe8978f178ead2812d3adb9c55bd5e038635bfb64b44571802997f98b1f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.microsoft.mixedreality.toolkit.foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263c060bfc159c6ec15abeaea9e25a0ff51e0cae3c061ff742788722cf44e3df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.microsoft.mixedreality.toolkit.tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 010387da024ddb830436616463c0c0210bd24c8cbf1b4345f4e22e63d460806b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2044 Malicious code in com.microsoft.mixedreality.toolkit.tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 010387da024ddb830436616463c0c0210bd24c8cbf1b4345f4e22e63d460806b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opera-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cfbe56e00b1f2b6404e53195a433e8101e6ae15d77addab0dfad7ce3414b2ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5104 Malicious code in opera-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cfbe56e00b1f2b6404e53195a433e8101e6ae15d77addab0dfad7ce3414b2ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4459 Malicious code in mailru-toolkit-lego-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ad7f34dc30e8c7b2d7ac5ce792161ffaa94305473c6cbfc016f30ff1d89916b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mailru-toolkit-lego-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ad7f34dc30e8c7b2d7ac5ce792161ffaa94305473c6cbfc016f30ff1d89916b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cbs-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc578e3a3153c0c53468b84a386baa62dbac6ae682cdd4fa477eb50edd0bf3cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1846 Malicious code in cbs-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc578e3a3153c0c53468b84a386baa62dbac6ae682cdd4fa477eb50edd0bf3cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1818

The Multi-page Toolkit WordPress plugin through 2.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping as well...

CVE-2022-1818

The Multi-page Toolkit WordPress plugin through 2.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping as well...

Cross site scripting

The Multi-page Toolkit WordPress plugin through 2.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping as well...

CVE-2022-1818

CVE-2022-1818 affects the WordPress plugin Multi-page Toolkit (versions up to 2.6). The vulnerability arises from a missing CSRF check when updating plugin settings, which could allow an authenticated admin to perform a CSRF attack that changes settings. This, combined with insufficient sanitisat...

CVE-2022-1818 Multi-page Toolkit <= 2.6 - Arbitrary Settings Update to Stored XSS via CSRF

The Multi-page Toolkit WordPress plugin through 2.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping as well...

Mageia: Security Advisory (MGASA-2022-0236)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress plugin Multi-page Toolkit 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Multi-page Toolkit plugin 2.6 and earlier versions are vulnerable to cross-site request forgery,...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Exempi vulnerabilities (USN-5483-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5483-1 advisory. It was discovered that Exempi incorrectly handled certain media files. If a user or automated system were tricked into opening a...

[SECURITY] Fedora 35 Update: qt5-qtbase-5.15.2-31.fc35

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

CVE-2022-31072

Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is...