MAL-2022-5867 Malicious code in runkit-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d1a12cf5df9a43c706a5f3c73571ad7199f6a81dd67d4b94d6b91ad149a5f5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4992 Malicious code in o-ads-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e617444fa6eff36ff9ae61eef4ce48b59a35c4e7f8f9c6a26159b22bde1cb6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o-ads-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e617444fa6eff36ff9ae61eef4ce48b59a35c4e7f8f9c6a26159b22bde1cb6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-music-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 883da00a86a30f54e03a143ee6f22b5e9e9e80c09c21a84dea6fd3d6ca36f813 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7172 Malicious code in wix-music-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 883da00a86a30f54e03a143ee6f22b5e9e9e80c09c21a84dea6fd3d6ca36f813 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in forms-embed-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf97fb0f32cd32091dcbca4ce7c70f578f20c58517aac7986b936e4e76bf16f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3110 Malicious code in forms-embed-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf97fb0f32cd32091dcbca4ce7c70f578f20c58517aac7986b936e4e76bf16f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4533 Malicious code in media-server-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe2194f7f7af27a6e37ef504b65dc6d2acef0181506af8e587227fad7b449f21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in media-server-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe2194f7f7af27a6e37ef504b65dc6d2acef0181506af8e587227fad7b449f21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tiktok_embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7efd23c732b9d63531a53f0dc12b58d8c1cc7fbaec7d4c0ada1bef6fb113c4b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Form - Contact Form <= 1.2.4 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitize and escape Custom text fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed Create/edit a form, add a Custom Text field, put the following payload in it: alert/XSS/, save the field...

CVE-2021-27781

The Master operator may be able to embed script tag in HTML with alert pop-up display cookie...

DRUPAL-CONTRIB-2022-042

The Drupal Embed module provides a filter to allow embedding various embeddable items like entities in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it is accessed by a trusted user with permission to embed items. In some...

Embed - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2022-042

The Drupal Embed module provides a filter to allow embedding various embeddable items like entities in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it is accessed by a trusted user with permission to embed items. In some...

PT-2022-38354

The Drupal Embed module provides a filter to allow embedding various embeddable items like entities in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it is accessed by a trusted user with permission to embed items. In some...

Slideshow CK < 1.4.10 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed Create/edit a Slideshow, add a Slide and put the following payload in the Description The XSS will be...

co.paralleluniverse:comsat-tomcat-loader (>=0.1.0, <=0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (>=8.0.0-rc1, <=8.0.3) +2 more potentially affected by CVE-2014-0095 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.0-rc1, <=8.0.3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.0-rc1, =0.1.0, =8.0.0-rc1, =8.0.1, =1.0.0.cr6, =1.0.0.cr7 Source cves: CVE-2014-0095 Source advisory: GHSA-WF5V-JHXJ-Q632...

co.paralleluniverse:comsat-tomcat-loader (>=0.1.0, <=0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (>=8.0.0-rc1, <=8.0.3) +2 more potentially affected by CVE-2014-0095 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.0-rc1, <=8.0.3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.0-rc1, =0.1.0, =8.0.0-rc1, =8.0.1, =1.0.0.cr6, =1.0.0.cr7 Source cves: CVE-2014-0095 Source advisory: OSV:GHSA-WF5V-JHXJ-Q632...

org.pidster:embed-apache-tomcat-core (>=0.1-alpha, <=0.2), org.pidster:embed-apache-tomcat-test (>=0.1-alpha, <=0.2) potentially affected by CVE-2013-4590 via org.apache.tomcat:tomcat (>=8.0.0-rc3, <=8.0.0-rc5)

org.apache.tomcat:tomcat MAVEN version =8.0.0-rc3, =0.1-alpha, =0.1-alpha, =0.2 Source cves: CVE-2013-4590 Source advisory: GHSA-87W9-X2C3-HRJJ...

org.pidster:embed-apache-tomcat-core (>=0.1-alpha, <=0.2), org.pidster:embed-apache-tomcat-test (>=0.1-alpha, <=0.2) potentially affected by CVE-2013-4590 via org.apache.tomcat:tomcat (>=8.0.0-rc3, <=8.0.0-rc5)

org.apache.tomcat:tomcat MAVEN version =8.0.0-rc3, =0.1-alpha, =0.1-alpha, =0.2 Source cves: CVE-2013-4590 Source advisory: OSV:GHSA-87W9-X2C3-HRJJ...