Malicious code in wlwz-2312-4602 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09d3966c6a030c7b516084272704ca880bf19f52fbff9c16ecc9e503b2c05ac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-4602

CVE-2023-4602 (Namaste! LMS, WordPress) shows a reflected XSS in the course_id parameter. The vulnerability affects Namaste! LMS up to version 2.6.1.1 and is exploitable by unauthenticated attackers who can trick a user into performing an action (e.g., clicking a link) to execute arbitrary script...

WordPress Namaste! LMS Plugin <= 2.6.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Namaste! LMS Type Plugin Vulnerable versions = 2.6.1.1 Fixed in 2.6.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4602 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 31640ca97ff3 Credits Vincenzo Turturro...

Debian: Security Advisory (DLA-307-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2015-4602

The PHPIncompleteClass function in ext/standard/incompleteclass.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an unexpected data type, related to a "type confusion"...

SUSE: Security Advisory (SUSE-SU-2022:4602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-4602

creationtimestamp| type| source ---|---|--- 2022-12-18 14:40:52+00:00| seen| https://t.me/cibsecurity/54824...

CVE-2022-4602

CVE-2022-4602 affects Shoplazza LifeStyle 1.1, specifically the Review Flow Handler’s /admin/api/theme-edit/ endpoint. The vulnerability arises from manipulating the Title parameter, enabling cross-site scripting with remote exploitation; the exploit has been disclosed publicly (VDB-216197). Acco...

CVE-2022-4602 Shoplazza LifeStyle Review Flow cross site scripting

A vulnerability was found in Shoplazza LifeStyle 1.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/api/theme-edit/ of the component Review Flow Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

RHEL 8 : binutils (RHSA-2021:4602)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4602 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

SUSE: Security Advisory (SUSE-SU-2015:1253-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:1253-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Perl vulnerabilities (USN-4602-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4602-1 advisory. ManhND discovered that Perl incorrectly handled certain regular expressions. In environments where untrusted regular expressions...

Ubuntu: Security Advisory (USN-4602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Multiple vulnerabilities affect IBM Quality Manager (RQM)

Summary There are multiple vulnerabilities that affect IBM Quality Manager RQM Vulnerability Details CVEID: CVE-2019-4602 DESCRIPTION: IBM Quality Manager RQM is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...

CVE-2013-4602

Summary: CVE-2013-4602 affects Avira AntiVir Engine

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1544)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4602-1 : xen - security update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, guest-to-host privilege escalation or information leaks. In addition this update provides mitigations for the 'TSX Asynchronous Abort'speculative side channel attack. For additional...

Debian: Security Advisory (DSA-4602-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : php5 (SUSE-SU-2015:1253-1)

This security update of PHP fixes the following issues : Security issues fixed : - CVE-2015-4024 bnc931421: Fixed multipart/form-data remote DOS Vulnerability. - CVE-2015-4026 bnc931776: pcntlexec did not check path validity. - CVE-2015-4022 bnc931772: Fixed and overflow in ftpgenlist that result...