CVE-2023-52514

creationtimestamp| type| source ---|---|--- 2024-03-02 23:26:23+00:00| seen| https://t.me/ctinow/198492 2024-03-04 21:11:37+00:00| seen| https://t.me/ctinow/199587...

MAL-2024-1051 Malicious code in build-benchmarks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9051e586242e7f4cb76bca3b533a915678a64eb52f0b8812e1a1d1f35e358fd5 The OpenSSF Package Analysis project identified 'build-benchmarks' @ 15.2.4 npm as malicious. It is considered malicious because: - The package...

Delta Electronics CNCSoft-B

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Delta Electronics Equipment : CNCSoft-B Vulnerability : Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 3...

CVE-2023-50905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

CVE-2023-50905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

CVE-2023-50905

CVE-2023-50905 is a stored XSS in the WordPress plugin WP Activity Log (Melapress) affecting versions up to 4.6.1. The root cause is improper neutralization of input during web page generation. Consequences include stored JavaScript execution if an attacker injects payload into the vulnerable fie...

CVE-2023-50905 WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

CVE-2023-50905 WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

CVE-2024-24150

creationtimestamp| type| source ---|---|--- 2024-02-29 02:56:34+00:00| seen| https://t.me/ctinow/196117 2024-02-29 03:03:08+00:00| seen| https://t.me/ctinow/196134 2024-03-12 18:16:54+00:00| seen| https://t.me/ctinow/205953...

CVE-2024-24149

creationtimestamp| type| source ---|---|--- 2024-02-29 02:56:32+00:00| seen| https://t.me/ctinow/196116 2024-02-29 03:03:07+00:00| seen| https://t.me/ctinow/196133 2024-03-12 18:16:51+00:00| seen| https://t.me/ctinow/205951...

CVE-2024-24147

creationtimestamp| type| source ---|---|--- 2024-02-29 02:56:31+00:00| seen| https://t.me/ctinow/196115 2024-02-29 03:03:03+00:00| seen| https://t.me/ctinow/196132 2024-03-12 18:16:53+00:00| seen| https://t.me/ctinow/205952...

CVE-2023-27151

openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number in the Saved Search Activity via the Name, Description, or Activity Number field...

CVE-2023-27151

openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number in the Saved Search Activity via the Name, Description, or Activity Number field...

Design/Logic Flaw

openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number in the Saved Search Activity via the Name, Description, or Activity Number field...

Element Android Security Vulnerability

Element Android is the Android Matrix client provided by Element. A security vulnerability exists in Element Android versions 1.4.3 through 1.6.10, which stems from the presence of an Intent redirection vulnerability that allows a third-party malicious application to initiate internal activity by...

WordPress Plugin WP Activity Log Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

MAL-2024-1043 Malicious code in ux1-ui-kit-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7620ca8f835799b0fb96ecf08f2fec44db42f20adac7a75cc1c21a17c162c5d5 The OpenSSF Package Analysis project identified 'ux1-ui-kit-theme' @ 1.8.85 npm as malicious. It is considered malicious because: - The package...

CVE-2024-25902

creationtimestamp| type| source ---|---|--- 2024-02-28 14:27:12+00:00| seen| https://t.me/ctinow/195479 2024-02-28 14:34:03+00:00| seen| https://t.me/ctinow/195494 2024-03-08 08:26:38+00:00| seen| https://t.me/ctinow/203134...

CVE-2024-26300

creationtimestamp| type| source ---|---|--- 2024-02-28 00:26:17+00:00| seen| https://t.me/ctinow/194986 2024-02-28 00:26:20+00:00| seen| https://t.me/ctinow/194989 2024-03-14 19:27:01+00:00| seen| https://t.me/ctinow/208058...