Malicious code in hlwgirl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70e129077e409b307127c9a7e24115d3838f7a8748b65fcc22df02cf79af94e7 The OpenSSF Package Analysis project identified 'hlwgirl' @ 1.99.2 npm as malicious. It is considered malicious because: - The package...

CVE-2021-36710

CVE-2021-36710 affects ToaruOS 1.99.2, with incorrect kernel access control due to improper MMU management and a low GDT address that allows userland mapping. This enables writing a call gate to escalate to CPL 0, per multiple connected sources (Red Hat, NVD, PRION/PT-PT, CNNVD, etc.). No public ...

ToaruOS 安全漏洞

ToaruOS is an open source computer operating system written in the C language. A security vulnerability exists in ToaruOS version 1.99.2 that stems from incorrect kernel access control...

XRMS 1.99.2 cases/some.php case_title Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because...

XRMS 1.99.2 - CRM 'msg' Parameter Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28041/info XRMS CRM is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Information disclosure

XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function...

XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering

XMRS Multiple Vulnerabilities ZeroDay at 25-07-2008 Author: AzzCoder [email protected] Product: http://www.xrms.org/ Product Type: CRM Thanks: coresecurity.com Remote File Inclusion File: activities/workflow-activities.php Variable: $includedirectory Required registerglobals: Yes XSS Multiple...

XRms 1.99.2 - CRM msg Cross-Site Scripting

XRms 1.99.2 - CRM msg Cross-Site Scripting source: https://www.securityfocus.com/bid/28041/info XRMS CRM is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...