Yellow Pencil Visual Theme Customizer < 7.2.1 - Privilege Escalation

The WaspThemes Visual CSS Style Editor aka yellow-pencil-visual-theme-customizer plugin before 7.2.1 for WordPress allows ypoptionupdate CSRF, as demonstrated by use of ypremoteget to obtain admin access. id: CVE-2019-11886 info: name: Yellow Pencil Visual Theme Customizer 7.2.1 - Privilege...

Yellow-Key-Check

This repository does not have a README...

yellow

| | | | | | |/ \ | |/ \ \ /\ / / | || | / | | \ V V / , ||||/ // |/ - Just add blue. yellow - just add blue Simple binary modifications that will trigger a canarytoken when a binary is executed. Ideal for boobytrapping production systems against attackers. Currently there are four methods:...

Malicious code in lightning-yellow-atl710-project (npm)

The package lightning-yellow-atl710-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in level-yellow-crow (npm)

Source: amazon-inspector edf0585845336e6aa4b90f78128dc3af918986bb33450dd034b45eabefad5e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in key-yellow-anteater (npm)

Source: amazon-inspector 7ae1111d2684c2a91d1a402983493e994218b28e6b1e0de16750edb31b42496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in karma-b2ijo-n034e-yellow-project (npm)

The package karma-b2ijo-n034e-yellow-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jellyfish-yellow-dar237-project (npm)

The package jellyfish-yellow-dar237-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jade-ctogy-92hct-yellow-project (npm)

The package jade-ctogy-92hct-yellow-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in interesting-yellow-lobster (npm)

Source: amazon-inspector f6baf605dc0172666767e140b9aff0bd3d89cf7ee0b3d2a5316ead0c32bc4ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in interested-yellow-meadowlark (npm)

Source: amazon-inspector 6fe4c85028d67bc884a414511c71d576588853c81295bc7508acec70d97400e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in insufficient-yellow-peafowl (npm)

Source: amazon-inspector 49b89b61443160c4cc154547db284d2e071836223c8826dfbae83551e2c4f2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in initial-yellow-impala (npm)

Source: amazon-inspector ffecbd5eaa570a450f38f5a39399b8722e79d7e63e97095dbfed9adf168eeada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in indirect-yellow-sheep (npm)

Source: amazon-inspector f63fa815acb544e56de6adffe85354d40b099da10d5e638fc3ecc069be6cf0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in improved-yellow-booby (npm)

Source: amazon-inspector c1dee708b72007ae81d4c195984d449a2d1d90e946ea51e149509d98652839f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in immediate-yellow-swift (npm)

Source: amazon-inspector 6dcfefa0fb7afe7d5b652ae479ed581578b699a6b095df265455831bb444d099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ideological-yellow-wildcat (npm)

Source: amazon-inspector 30a28a6b7f429ff021d3c17779d483f072e460a0941d33f54dcb9e0ab55f788b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in icicle-yellow-qva287-project (npm)

The package icicle-yellow-qva287-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hushed-yellow-pike (npm)

Source: amazon-inspector 4b5046b6121bab1999145b9076ee17ff197855f7d1946b41356b1bb5c2e4eba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in holy-yellow-tahr (npm)

Source: amazon-inspector d5565961816745269ff38cccb7f21cb829a9d41541b8e4653ab1747231b5fc73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...