Malicious code in editor-with-wrapper-no-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51686c2414d61dee9e94ea84369aa9e2aac2ae6984737e6007c2566b8a9ff569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viewer-with-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66a8e562679fbf09b06a6287638fe461f954f8a4317f709aaa891e97be95be34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in editor-with-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50810274815cc122c9e2f2b32e58d400a2c18128d505458cc04673676b46b504 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6929 Malicious code in viewer-with-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66a8e562679fbf09b06a6287638fe461f954f8a4317f709aaa891e97be95be34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2668 Malicious code in editor-with-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50810274815cc122c9e2f2b32e58d400a2c18128d505458cc04673676b46b504 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5663 Malicious code in react-overlays-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ec5e5b499d06ac9ad3a7ec68fa8419625dca65d4e534e4a449739421e23e64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-overlays-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ec5e5b499d06ac9ad3a7ec68fa8419625dca65d4e534e4a449739421e23e64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdk-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f9f4fe9064836db3994b0e2e6eb32cabfee5c17ae2e4a2eb2e333471854fcd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1855 Malicious code in cdk-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f9f4fe9064836db3994b0e2e6eb32cabfee5c17ae2e4a2eb2e333471854fcd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 0x-fee-wrapper-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a9d80927be2fbab050ca79fbed448dcc2058ca5eb8ea27c28fffedc5d6ab3a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30744

DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.220431 allows attacker to execute arbitrary code...

Vote locking should block wrapper contracts

Lines of code Vulnerability details The reason that users are given boosted rewards for locking their governance tokens is that by making them illiquid for a set amount of time, the supply available to be sold is restricted, and users buying the token are more able to push the price up. Impact By...

ssl-utils 操作系统命令注入漏洞

ssl-utils is a wrapper for some OpenSSL commands around Node.js. A security vulnerability exists in ssl-utils version 1.0.0, which can be exploited by an attacker to execute arbitrary commands...

CVE-2022-30968

Jenkins vboxwrapper Plugin 1.3 and earlier does not escape the name and description of VBox node parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

GHSA-RMMF-5XHH-GG27 phpMyAdmin path disclosure

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the expo...

Joomla! Object Injection Vulnerability

An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for object injection attacks because there is no protection mechanism such as the TYPO3 PHAR stream wrapper to prevent use of the phar:// handler for non .phar-files...

GHSA-5M3W-RVVH-8FX6 Joomla! Object Injection Vulnerability

An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for object injection attacks because there is no protection mechanism such as the TYPO3 PHAR stream wrapper to prevent use of the phar:// handler for non .phar-files...

CVE-2022-20006

In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condition. This could lead to local escalation of privilege if a Guest user is enabled, with no additional execution privileges needed. User...

CVE-2021-27435

ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in mallocwrapper function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

Dexie 安全漏洞

Dexie is a wrapper library for indexedDB a standard database in the browser that provides a clean database API. A security vulnerability exists in Dexie versions prior to 3.2.2, 4.0.0-alpha.1 through 4.0.0-alpha.3, which can be exploited by an attacker to cause a Denial of Service DoS attack...