Malicious code in terra-view-function-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c00058bf42508940f7138ab18f39487a17faa6709662f091634526b5ab4ee450 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-view-function-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0591a6f900848bb1a6ef65955d72b4096dcd4e6faaaf74cb8025dc2d56e606f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3821 Malicious code in ing-feat-view-cancel-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a96839d6862446e5435e2868d82e9d99a65637d3765e41079cb6da9c941e005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@bobliao/candle-view (>=0.1.4, <=0.3.8) potentially affected by unknown CVE via plugin-bugfix-v8-spread-parameters-in-optional-chaining (0.0.1-security)

plugin-bugfix-v8-spread-parameters-in-optional-chaining NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-bugfix-v8-spread-parameters-in-optional-chaining and may be impacted: - @bobliao/candle-view =0.1.4, =0.3.8 Source...

CVE-2022-31296

Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...

CVE-2022-31296

Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...

CVE-2022-31356: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=...

CVE-2022-31357: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...

CVE-2022-31383

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php...

CVE-2022-31383

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php...

CVE-2022-31383

Directory Management System v1.0 is affected by a SQL injection vulnerability triggered via the editid parameter in view-directory.php. The issue is consistently described across multiple sources as an SQL injection originating from the editid input, enabling arbitrary SQL execution. The CVE-2022...

PT-2022-3050

Name of the Vulnerable Software and Affected Versions Directory Management System version 1.0 Description The issue is related to a SQL injection vulnerability in the Directory Management System. This vulnerability can be exploited via the editid parameter in the view-directory.php file, allowing...

CVE-2022-31383: Improper Neutralization of Special Elements used in an SQL Command

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php...

Directory Management System SQL注入漏洞

Directory Management System is a directory management system by Anuj Kumar, a personal developer. A security vulnerability exists in Directory Management System v1.0, which can be exploited to perform an SQL injection attack via the editid parameter in view-directory.php...

CVE-2022-32433

itsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via ip/school/view/allteacher.php...

CVE-2022-32433

itsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via ip/school/view/allteacher.php...

CVE-2022-32433

CVE-2022-32433 affects itsourcecode Advanced School Management System v1.0. The vulnerability enables Arbitrary code execution via the endpoint ip/school/view/all_teacher.php. The CVE entry provides a basic impact assessment (CVSS v3.1: base score 7.2, HIGH) and indicates network-based access wit...

CVE-2022-32433: Unrestricted Upload of File with Dangerous Type

itsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via ip/school/view/allteacher.php...

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77050)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/viewfield.php?id=page. SQL injection problem, an attacker can use this vulnerabilit...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-50939)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. The vulnerability can be exploited to crash the...