10 matches found
MAL-2025-31109 Malicious code in quarry_cy5kj_cipog_zenith (npm)
The package quarrycy5kjcipogzenith was found to contain malicious code...
CVE-2025-31109
creationtimestamp| type| source ---|---|--- 2025-03-27 04:26:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9021 2025-03-27 06:37:13+00:00| seen| https://t.me/cvedetector/21257...
CVE-2024-31109
Cross-Site Request Forgery CSRF vulnerability in Toastie Studio Woocommerce Social Media Share Buttons allows Stored XSS.This issue affects Woocommerce Social Media Share Buttons: from n/a through 1.3.0...
CVE-2024-31109
CVE-2024-31109 describes a CSRF-driven stored XSS vulnerability in Toastie Studio Woocommerce Social Media Share Buttons (affecting builds up to 1.3.0). The Red Hat entry confirms CSRF as the vulnerability type and Stored XSS as the impact, affecting the specified plugin. The provided documents d...
WordPress Woocommerce Social Media Share Buttons Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
Software Woocommerce Social Media Share Buttons Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31109 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2941fe56e84a Credits Dimas Maula...
CVE-2022-31109
creationtimestamp| type| source ---|---|--- 2022-08-01 20:16:57+00:00| seen| https://t.me/cibsecurity/47358 2025-04-23 18:05:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13102...
CVE-2022-31109
CVE-2022-31109 affects laminas-diactoros (PSR-7/PSR-17 implementation). The issue arises when X-Forwarded-* headers can influence Laminas\Diactoros\Uri in the ServerRequest, potentially altering host/protocol/port and enabling XSS or URL poisoning if a linked URL uses the modified value. Mitigati...
CVE-2022-31109 HTTP Host Header Attack Vulnerability in laminas-diactoros
laminas-diactoros is a PHP package containing implementations of the PSR-7 HTTP message interfaces and PSR-17 HTTP message factory interfaces. Applications that use Diactoros, and are either not behind a proxy, or can be accessed via untrusted proxies, can potentially have the host, protocol,...
