Malicious code in @diotoborg/distinctio-vel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9139c15805662d3ce44a4b41220a2a4e2523249f01c1cf387b9d747797a0e717 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/nisi-suscipit-vel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ae1ff99e54a2fe8ce6f015abff8fb97a03e741752b0265d31b4d36bfc6d5dea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8468 Malicious code in @diotoborg/nisi-suscipit-vel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ae1ff99e54a2fe8ce6f015abff8fb97a03e741752b0265d31b4d36bfc6d5dea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/nostrum-vel-beatae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 207b44fa58161604f16539977ccdf703552e0034a73d9c41d04a16c5bb22587b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7302 Malicious code in @zitterorg/nostrum-vel-beatae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 207b44fa58161604f16539977ccdf703552e0034a73d9c41d04a16c5bb22587b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/vel-at-tenetur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce96c6eb95e171ed20b8b7341a0a665ac092be2cf81d89899746f511ab279092 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7399 Malicious code in @zitterorg/vel-at-tenetur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce96c6eb95e171ed20b8b7341a0a665ac092be2cf81d89899746f511ab279092 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/sit-vel-delectus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54bfa38d2b63aa8984c09de50f43e8a7e6edd21efa7ea6ba17bc4f63a7b4ab69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7386 Malicious code in @zitterorg/sunt-vel-nam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 371f246d07711279b08bc5beabd351c9a42f3f402101922efd34fe1ea0f1158e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/vel-ad-ut (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7139bc201f51d17b197242d76fbc388aba5b238053c72cb427cbc25d605a85e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1496 Malicious code in @juiggitea/vel-ad-ut (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7139bc201f51d17b197242d76fbc388aba5b238053c72cb427cbc25d605a85e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1497 Malicious code in @juiggitea/vel-et-repudiandae-sit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6e68320d142fd1a5b023696ebcf04d935dc6a848bc7f9e35b996e72b9c4216c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/quod-dolores-vel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381ae78404548f76cd230ae90da563e4b88c27ad7b226e6b2024a1291dc4dff0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

acymailing, 6.9.2,Other

acymailing, 6.9.2,Other Update to version 6.9.2 Developer did not inform the VEL team...

Exploit for Cross-site Scripting in Kunena

CVE-2019-15120 Exploit for XSS via BBCode on Kunena extension...

J-Business Directory,4.9.3,SQL Injection

jBusiness Directory from CMS Junkie,4.9.3 and previous versions, SQL Injection, XSS resolution: update to 4.9.4 update notice: http://www.cmsjunkie.com/blog/joomlabusinessdirectory4-9-4release/ Note that the developer did not inform the VEL...

vel-in.fr XSS vulnerability

Open Bug Bounty ID: OBB-574780 Description| Value ---|--- Affected Website:| vel-in.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Simple Image Gallery (free) 3.5.0 and previous, XSS

Simple Image Gallery Freed by Joomlaworks, version 3.5.0 and previous, XSS Resolution: update to 3.6.0 Update notice: https://www.joomlaworks.net/blog/item/269-simple-image-gallery-free-v3-6-0-released-featuring-enhanced-print-previews-fixing-xss-vulnerability-related-to-print-page-output Note th...

HDW Player,4.0.0, RCE

HDW Player,4.0.0 and all other versions, remote code execution Note that this vulnerabilitiy was supposedly fixed by the developer in version 3.2.2, the fact that this issue has arisen again suggests that the developer is aware of it and has created a deliberate back door. The VEL believe that th...

DT Register, sql/xss, 3.1.12 / 2.8.18 and previous

DT Register Vulnerable version: 3.1.12 / 2.8.18 and previous sql/xss http://www.dthdevelopment.com/dth-news/dt-register-3.1.13-security-release.html http://www.dthdevelopment.com/joomla-components/dt-register-event-registration-for-joomla.html developer did not inform VEL...