WordPress plugin Exhibit to WP Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-17436 · WordPress · Exhibit To Wp Gallery

Name of the Vulnerable Software and Affected Versions: Exhibit to WP Gallery WordPress plugin version 0.0.2 Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the page. This could be...

Malicious code in weekendfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a849edc917944121cfccfa291e1d3004f70217db057208193c6d912d4064126d The OpenSSF Package Analysis project identified 'weekendfe' @ 0.0.2 npm as malicious. It is considered malicious because: - The package executes...

Malicious code in spot-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5266209798ebafe67e3827752a8025acd7d54406e99400930929aee0c6b8e862 The OpenSSF Package Analysis project identified 'spot-admin' @ 0.0.2 npm as malicious. It is considered malicious because: - The package execute...

MAL-2024-11776 Malicious code in spot-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5266209798ebafe67e3827752a8025acd7d54406e99400930929aee0c6b8e862 The OpenSSF Package Analysis project identified 'spot-admin' @ 0.0.2 npm as malicious. It is considered malicious because: - The package execute...

Malicious code in keycloak-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3df989aa26dccceca3917c9b3454427df4f54e9c104fbc080e913d30af3e66b2 The OpenSSF Package Analysis project identified 'keycloak-server' @ 0.0.2 npm as malicious. It is considered malicious because: - The package...

AZL-52227 CVE-2024-51744 affecting package kube-vip-cloud-provider for versions less than 0.0.2-22

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

CVE-2024-9373 Elemenda <= 0.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The Elemenda plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to...

WordPress plugin Elemenda 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-39601 · WordPress · Elemenda

Name of the Vulnerable Software and Affected Versions: Elemenda plugin for WordPress versions up to, and including, 0.0.2 Description: The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input sanitization and output escaping. This allows authenticated...

Malicious code in iufgbewroibgfowiebc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 06029514a813cf9b228f1be7c997bffc2510869a5f0130d6036fa63ee6ea2fbc According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

CVE-2024-39853

adolphdudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-39853

The CVE-2024-39853 entry concerns the ratio-swiper library by adolph_dudu, version 0.0.2. The root cause is a prototype pollution vulnerability in the parse function, which could enable an attacker to inject arbitrary properties into objects and potentially alter behavior of objects inheriting fr...

Swiper Security Vulnerabilities

Swiper is a free mobile touch slider by Vladimir Kharlampidi personal developer. It is intended for use in mobile websites, mobile web applications and mobile native applications. A security vulnerability exists in Swiper version v0.0.2, which stems from the inclusion of prototype contamination v...

Collabora Online 安全漏洞

Collabora Online is an application from Collabora UK. A powerful LibreOffice-based online office that supports all major document, spreadsheet and presentation file formats. A security vulnerability exists in Collabora Online version 0.0.2 and later, which stems from the presence of a local file...

@abcpros/xpicash (>=1.1.1, <=1.1.2), @alakipalaki/handshake (>=0.1.0-305766c0, <=3.1.0) +71 more potentially affected by CVE-2023-50475 via bsock (>=0.0.2, <=0.1.11)

bsock NPM version =0.0.2, =1.1.1, =0.1.0-305766c0, =0.1.0-305766c0, =0.0.12, =1.0.0, =1.0.0, =0.0.12, =0.0.1, =1.0.1, =1.3.0 - adeps 4.99.0 - aliasing 0.1.0 - atomicagent 0.1.0 and more Source cves: CVE-2023-50475 Source advisory: OSV:GHSA-JJ93-39PF-7MCF...

Malicious code in alok-test123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e08174da02aedc0309b86a446a477048c0e3a557116dcfe7850b2c0038fcb3c2 The OpenSSF Package Analysis project identified 'alok-test123' @ 0.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in plugin-getting-started (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b95fa1847620d5c168b65bdb2d2753b26090a68b3c1f7846edd359a80d3e34f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xmlbuilder3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5ccc40a08ace658e1c2bb67a692e4a04f1c6c826a6cfbf7c2bec41d0f54c540 The OpenSSF Package Analysis project identified 'xmlbuilder3' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...

Malicious code in notsogood (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b089f6e53ae82855fbdcf8b69573b5835bdc0ca9a476056a3fb78f1e85c2a50c The OpenSSF Package Analysis project identified 'notsogood' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...