MAL-2022-6413 Malicious code in tag-manager-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 986d6aa3c75a03f6fe0c133f3da8dd1c573c7d82babb32b0b72179891bb9650f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6430 Malicious code in tdd-react-store-locator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 855af4e7b69589b68e5747b1f884b744012d8435eac0ab9c915f2fea942d3189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5375 Malicious code in plugin-typings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97b64ac09f896fe6ddb004951a14588053024a3cdca4f87019e8f92f78f18c10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5172 Malicious code in p2p-amount-field (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c708cc5ca0100211486fde89b6f6ed0a2e1bf6458524412d0cf66ab6b5698839 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3756 Malicious code in icons-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5044c44aa1d6f9b455bbd96420485e2d7aa4dee38d050a7ebdcb96dbd10fd65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5514 Malicious code in public-method-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b29a42144105852972b71aeec148bf0858f37aab6727068d76a4ac0c92cf91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-768 Malicious code in @xvideos/npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d797e35e748d5b2cab756908e166fdb60dffaa90a340589168691b9466cccf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7133 Malicious code in whatsnewingoland (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b0c27d142e0fa569d9a9b6151e0db833f77ad2569631d88b3c4288e9d398d26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2212 Malicious code in countdown-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce504edea8acfb8cd95b91d4f9f21907308aed440794736ed3155857bdaf0d6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6754 Malicious code in ui-extensions-server-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c62c5c5dd9010448134993984fa17538a55c6ac68f350f4c9ba81c827f54645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7359 Malicious code in youla-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3b6fd2538a87fd893e2acb253f72093c7d1b5b6eace2522148a601114b12c83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-14 Malicious code in 0x-fee-wrapper-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a9d80927be2fbab050ca79fbed448dcc2058ca5eb8ea27c28fffedc5d6ab3a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1654

Jupiter Theme = 6.10.1 and JupiterX Core Plugin = 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges via the "abbuninstalltemplate" both and "jupiterxcorecpuninstalltemplate" JupiterX Core Only AJAX actions...

GHSA-VG2G-698H-V9W3 PyroCMS Vulnerable to CSRF

PyroCMS 3.7 is vulnerable to cross-site request forgery CSRF via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted...

GHSA-RFC8-WRRF-WP3W Jenkins Azure PublisherSettings Credentials Plugin stored credentials in plain text

Jenkins Azure PublisherSettings Credentials Plugin stored the service management certificate unencrypted in credentials.xml on the Jenkins controller. These credentials could be viewed by users with access to the Jenkins controller file system. Azure PublisherSettings Credentials Plugin has been...

Jupiter < 6.10.2 & JupiterX Core < 2.0.8 - Subscriber+ Privilege Escalation and Post Deletion

When the theme is installed, any logged-in user can elevate their privileges to an administrator by sending an AJAX request with the action parameter set to abbuninstalltemplate. This calls the uninstallTemplate function, which calls the resetWordpressDatabase function, where the site is...

CVE-2022-27167

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET...

HP Jumpstart Escalation of Privilege

A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of privilege. HP is recommending that customers uninstall HP Jumpstart and use myHP software. HP Jumpstart software has been discontinued and has been replaced by myHP software. HP...

ESET NOD32 Antivirus 安全漏洞

ESET NOD32 Antivirus is a suite of antivirus programs from ESET Slovakia. A security vulnerability exists in ESET NOD32 Antivirus, which can be exploited by an attacker to escalate privileges via repair and uninstall options...

多款ESET产品安全漏洞

ESET Smart Security Premium and others are products of ESET Slovakia.Smart Security Premium is a suite of antivirus programs.Internet Security is a suite of antivirus programs for Internet security.Eset Endpoint Antivirus and others are products of Eset Slovakia.Eset Endpoint Antivirus is an...