Cross site scripting

openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...

CVE-2023-27150

openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...

CVE-2023-27150

openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...

CVE-2023-27150

OpenCRX 5.2.0 has a cross-site scripting (XSS) vulnerability in the Name field when creating a Tracker in Manage Activity. Root cause: input in the Name field is not properly sanitized, enabling script execution. Impact: potential client-side script execution affecting users of affected deploymen...

CVE-2023-27150

openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...

MAL-2023-8769 Malicious code in richcolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 50d5904bd379a75fd43115d7339df3d79f87ec691026774160b15b8632a9f8ae Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

CVE-2023-27151

CVE-2023-27151 affects openCRX 5.2.0, where an HTML injection vulnerability exists in the Saved Search Activity’s Search Criteria - specifically via the Name, Description, or Activity Number fields. The cited sources describe a vulnerability in the OpenCRX application and note an HTML injection t...

PT-2023-20976 · Opencrx · Opencrx

Name of the Vulnerable Software and Affected Versions: openCRX version 5.2.0 Description: A cross-site scripting XSS issue was discovered in openCRX, which occurs via the Name field after creating a Tracker in Manage Activity. This allows for potential malicious script execution. Recommendations:...

CVE-2023-27151

openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number in the Saved Search Activity via the Name, Description, or Activity Number field...

CVE-2023-7092

creationtimestamp| type| source ---|---|--- 2023-12-24 15:26:17+00:00| seen| https://t.me/ctinow/159036 2023-12-25 00:31:57+00:00| seen| https://t.me/ctinow/159104 2024-01-05 22:16:45+00:00| seen| https://t.me/ctinow/163740...

CVE-2023-45777

creationtimestamp| type| source ---|---|--- 2023-12-24 11:12:04+00:00| seen| https://t.me/ctinow/158995 2024-01-20 15:17:03+00:00| seen| https://t.me/ctinow/170641 2024-01-21 03:47:32+00:00| published-proof-of-concept| https://t.me/CNArsenal/1881...

MAL-2023-8742 Malicious code in myservice.web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e7166b9d2dc785b619a4e36f5aeb34e44716a8d8c0fc3b31771358e77d7399 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8737 Malicious code in riskex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 221585b9da0150b32bdbd437dbe0b91deb53f4974b219b2215d642e2565439e9 The OpenSSF Package Analysis project identified 'riskex' @ 0.1.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2023-8735 Malicious code in fe-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eed6012c5576169a48a200a9b4127c89b4c8e96449f17276d6e108aef5f1a13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8734 Malicious code in next-id-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78b8ec553ac410688ce195e0361743232f4c5c356df00d5dfb465da50060f8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-51049

creationtimestamp| type| source ---|---|--- 2023-12-21 17:21:45+00:00| seen| https://t.me/ctinow/157838 2024-01-14 13:11:10+00:00| seen| https://t.me/ctinow/168019...

CVE-2023-50987

creationtimestamp| type| source ---|---|--- 2023-12-20 23:42:31+00:00| seen| https://t.me/ctinow/157391 2023-12-22 23:17:03+00:00| seen| https://t.me/ctinow/158656 2024-01-14 07:41:23+00:00| seen| https://t.me/ctinow/167948...

RHSA-2023:7886

creationtimestamp| type| source ---|---|--- 2023-12-20 14:18:24+00:00| seen| https://t.me/ctinow/157017 2024-01-07 03:06:24+00:00| seen| https://t.me/ctinow/164046 2024-01-07 03:36:28+00:00| seen| https://t.me/ctinow/164051...

MAL-2023-8711 Malicious code in test-codecpetjs-bdd-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da2ef24d0c6c635c4cc20335bf5babe60d295ebae2df1d4559bbe24373156bc8 The OpenSSF Package Analysis project identified 'test-codecpetjs-bdd-tests' @ 1.2.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-8710 Malicious code in biobot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3b2c26ec52eb2c7fbc6aca147f99990d56fd9eb9c51517b6b3aa7f41755adb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...