1352 matches found
Malware in codat-docs
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-11193 Malicious code in codat-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15d6ef87bdf4981301dbd1430d57248ad6a9606733d297f570edc7d22cf495c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-16440 · WordPress · Basepress Docs
Name of the Vulnerable Software and Affected Versions: Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress versions up to, and including, 2.16.3.3 Description: The issue allows authenticated attackers with Subscriber-level access and above to update the database due t...
WordPress plugin BasePress Docs 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2024-10664: Missing Authorization
The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the basepressdbpostsupdate function in all versions up to, and including, 2.16.3.3. This makes it possible for authenticated...
WordPress BasePress Docs plugin <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update vulnerability
Missing Authorization to Authenticated Subscriber+ Database Update vulnerability discovered by BrokenAC ignore in WordPress Plugin Knowledge Base documentation & wiki plugin – BasePress versions = 2.16.3.3...
Malicious code in h5bp-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f10e6ae365af97b4c79f04f1355dd26a8862632b8ce77cf50da4b2195414716 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11168 Malicious code in h5bp-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f10e6ae365af97b4c79f04f1355dd26a8862632b8ce77cf50da4b2195414716 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-11203: Improper Neutralization of Input During Web Page Generation
The EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘providername parameter in all versions up to, and including, 4.1.3 due t...
Mageia: Security Advisory (MGASA-2024-0376)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.5 bugfix release
Red Hat Developer Hub 1.2.5 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...
Fedora 37 : python3-docs / python3.11 (2022-a9a4c48d06)
The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-a9a4c48d06 advisory. The final release of Python 3.11.0. Contains security fix for CVE-2022-42919. Tenable has extracted the preceding description block directly from th...
CVE-2024-48463
Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...
CVE-2024-48463
Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...
CVE-2024-48463
Bruno IDE Desktop versions prior to 1.29.1 are vulnerable to a command injection vulnerability (CWE-78) and unvalidated URL handling. The root cause is the use of Electron's shell.openExternal function within the Markdown docs viewer without proper validation of http or https protocols. This allo...
CVE-2024-48463
Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...
CVE-2024-48463
Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...
CVE-2024-48463: URL Redirection to Untrusted Site
Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...
Malicious code in rentez-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d38f5182bdac1a9d1dc8a7edd04bf4887e39416ac443361fbe2b4de7341c0360 The OpenSSF Package Analysis project identified 'rentez-docs' @ 6.6.6 npm as malicious. It is considered malicious because: - The package...