94 matches found
Malicious code in web-suggest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c96e4f63375b8c1f6493ccb2333bd63d9e3ca782efe9bf35b6d5c336a92993b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-600 Malicious code in mini-suggest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 895aff62da3563e94b2f4b00f28219c44afa3be20008634bc44dd99567f21361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-961 Malicious code in web-suggest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c96e4f63375b8c1f6493ccb2333bd63d9e3ca782efe9bf35b6d5c336a92993b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
XVIDEOS: Self-XSS on Suggest Tag dialog box
Summary: Stored cross-site scripting arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way. vulnerable URL : https://www.xvideos.com/video57921571/friendb.ifd. Vulnerability Description : Application have a add ta...
PT-2022-36686 · Git +1 · Hunspell
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the AffixMgr::cpdpat check, AffixMgr::compound check, and SuggestMgr::checkword...
hunspell:affdicfuzzer: Heap-buffer-overflow in AffixMgr::compound_check
Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5529191948353536 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasani386hunspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
PT-2022-37274 · Git +1 · Hunspell
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the SfxEntry::add, AffixMgr::expand rootword, and SuggestMgr::ngsuggest functions. N...
hunspell:affdicfuzzer: Heap-buffer-overflow in SuggestMgr::badcharkey_utf
Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=4637636781801472 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasanhunspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...
PT-2022-3326
Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0 Description The issue is related to an out-of-bounds read in the suggest trie walk function of the Vim text editor. This can allow an attacker to impact the confidentiality, integrity, and availability of protected...
PT-2022-3442
Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to an out-of-bounds read in the suggest trie walk function of the Vim text editor. This could allow a remote attacker to gain unauthorized access to protected information. The problem...
GHSA-86VM-8M4P-6263 OpenTSDB Cross-site Scripting vulnerability
An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter type to the /suggest URI...
OpenTSDB Cross-site Scripting vulnerability
An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter type to the /suggest URI...
Firefox Suggest to display sponsored ads but users can disable them
By Deeba Ahmed The company maintains that it has to help fund Firefox’s optimization/development, and therefore, it has introduced a new feature called Firefox Suggest in Firefox 93. This is a post from HackRead.com Read the original post: Firefox Suggest to display sponsored ads but users can...
Firefox reveals sponsored ad “suggestions” in search and address bar
Mozilla is trying a novel experiment into striking a balance between ad revenue generation and privacy protection by implementing a new way to deliver ads in its Firefox web browser—presenting them as “suggestions” whenever users type into the dual-use search and URL address bar. The advertising...
CVE-2020-22200
Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to publicgetsuggestkeyword...
PT-2021-10744
Name of the Vulnerable Software and Affected Versions phpCMS version 9.1.13 Description The issue is related to a Directory Traversal vulnerability. It can be exploited via the q parameter to the "public get suggest keyword" endpoint. Recommendations For phpCMS version 9.1.13, consider restrictin...
Watson - Enumerate Missing KBs And Suggest Exploits For Useful Privilege Escalation Vulnerabilities
Watson is a .NET tool designed to enumerate missing KBs and suggest exploits for Privilege Escalation vulnerabilities. Supported Versions Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Server 2016 & 2019 Usage C:\ Watson.exe / / /\ \ \ | | \ / / / | / |/ | ' \ \ /\ / | |...
PT-2020-22391
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the involvement of specific functions such as...
keyword-suggest-tool.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1030626 Security Researcher Trarz Helped patch 8 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting keyword-suggest-tool.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of...