MAL-2022-7381 Malicious code in zen-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd12a62adb95a21285708de95d958a6a2daaa6c02805c7d8e455eeeefa01252e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zen-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd12a62adb95a21285708de95d958a6a2daaa6c02805c7d8e455eeeefa01252e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview zen-website is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in sdm.vendor.zen-observable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9905400f798ab1d0575f20bc982460af51bb4a071f3f6716627ab188614175f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-...

PT-2022-14379 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: A permanent denial of service due to resource exhaustion is possible in the addAutomaticZenRule function of ZenModeHelper.java. This could lead to a local denial of service, requiri...

Reflected XSS in Zen Cart before 1.5.7a

Zen Cart 1.5.6d allows reflected XSS via the mainpage parameter to includes/templates/templatedefault/common/tplmainpage.php or includes/templates/responsiveclassic/common/tplmainpage.php...

GHSA-WXXX-2X6V-979F Reflected XSS in Zen Cart before 1.5.7a

Zen Cart 1.5.6d allows reflected XSS via the mainpage parameter to includes/templates/templatedefault/common/tplmainpage.php or includes/templates/responsiveclassic/common/tplmainpage.php...

Zen Cart vulnerable to authenticated remote code execution

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

GHSA-38F9-4VHQ-9CR8 Zen Cart vulnerable to authenticated remote code execution

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

Authenticated RCE in Zen Cart 1.5.5e

The traverseStrictSanitize function in admindir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array index of the adminname array parameter to...

GHSA-C9R9-3H38-R7VJ Authenticated RCE in Zen Cart 1.5.5e

The traverseStrictSanitize function in admindir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array index of the adminname array parameter to...

shop-zen-moment.com Cross Site Scripting vulnerability OBB-2457671

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin <= 4.0.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin versions = 4.0.4. Solution Update the WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin to the latest available version at least...

WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin <= 4.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin versions = 4.0.4. Solution Update the WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin to the latest...

AMD EPYC 信息泄露漏洞

AMD EPYC is an x86 server microprocessor product line from AMD, known as "Xiao Long" in Chinese, which utilizes the Zen microarchitecture. AMD EPYC has an information disclosure vulnerability that can be exploited by attackers to exploit multiple vulnerabilities in AMD processors...

Zen Cart Detection (HTTP)

HTTP based detection of Zen Cart. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.146890";...

PT-2021-4416

Name of the Vulnerable Software and Affected Versions AMD CPUs affected versions not specified Existing AMD CPUs vulnerable to the issue AMD CPUs based on Zen+ and Zen 2 microarchitectures Description The issue is related to speculative execution of read and write operations, accessing memory usi...

[ASA-202107-49] linux-zen: privilege escalation

Arch Linux Security Advisory ASA-202107-49 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-3609 CVE-2021-3612 CVE-2021-33909 Package : linux-zen Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-2182 Summary ======= The...

glibc security update

2.28-151.0.1.el84 - merge RH patches for ol8-u4 release Review-exception: Patch merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag ...