PT-2022-16649 · WordPress · Feed Them Social

Name of the Vulnerable Software and Affected Versions: Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress versions up to, and including 2.9.8.5 Description: The issue allows deserialization of untrusted input via the fts url parameter. This enables unauthenticated attacker...

Visualizer: Tables and Charts Manager for WordPress < 3.7.10 - Contributor+ PHAR Deserialization

The plugin does not validate the ‘remotedata’ parameter allowing contributor and above roles to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP objects when a POP chain is present...

Malicious Package

Overview react-swipeable-wrapper-example is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable i...

Malicious code in editor-with-wrapper-no-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51686c2414d61dee9e94ea84369aa9e2aac2ae6984737e6007c2566b8a9ff569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viewer-with-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66a8e562679fbf09b06a6287638fe461f954f8a4317f709aaa891e97be95be34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in editor-with-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50810274815cc122c9e2f2b32e58d400a2c18128d505458cc04673676b46b504 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6929 Malicious code in viewer-with-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66a8e562679fbf09b06a6287638fe461f954f8a4317f709aaa891e97be95be34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2668 Malicious code in editor-with-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50810274815cc122c9e2f2b32e58d400a2c18128d505458cc04673676b46b504 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5663 Malicious code in react-overlays-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ec5e5b499d06ac9ad3a7ec68fa8419625dca65d4e534e4a449739421e23e64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-overlays-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ec5e5b499d06ac9ad3a7ec68fa8419625dca65d4e534e4a449739421e23e64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdk-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f9f4fe9064836db3994b0e2e6eb32cabfee5c17ae2e4a2eb2e333471854fcd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1855 Malicious code in cdk-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f9f4fe9064836db3994b0e2e6eb32cabfee5c17ae2e4a2eb2e333471854fcd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 0x-fee-wrapper-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a9d80927be2fbab050ca79fbed448dcc2058ca5eb8ea27c28fffedc5d6ab3a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30744

DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.220431 allows attacker to execute arbitrary code...

Vote locking should block wrapper contracts

Lines of code Vulnerability details The reason that users are given boosted rewards for locking their governance tokens is that by making them illiquid for a set amount of time, the supply available to be sold is restricted, and users buying the token are more able to push the price up. Impact By...

ssl-utils 操作系统命令注入漏洞

ssl-utils is a wrapper for some OpenSSL commands around Node.js. A security vulnerability exists in ssl-utils version 1.0.0, which can be exploited by an attacker to execute arbitrary commands...

CVE-2022-30968

Jenkins vboxwrapper Plugin 1.3 and earlier does not escape the name and description of VBox node parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

GHSA-RMMF-5XHH-GG27 phpMyAdmin path disclosure

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the expo...

GHSA-5M3W-RVVH-8FX6 Joomla! Object Injection Vulnerability

An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for object injection attacks because there is no protection mechanism such as the TYPO3 PHAR stream wrapper to prevent use of the phar:// handler for non .phar-files...

Joomla! Object Injection Vulnerability

An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for object injection attacks because there is no protection mechanism such as the TYPO3 PHAR stream wrapper to prevent use of the phar:// handler for non .phar-files...