MAL-2024-9341 Malicious code in avail-able-albu-m-down-load-15496-morning-view-pbn51-tjmcxv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a44acac841eaeacfa072df02665786202f3c5233f826cfc1e37e80b0c157395 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in avail-able-albu-m-down-load-114925-rainier-fog-nuh7o-acneyh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab72642b19573c9e24f11f0ecbf3726e03c29dc2bd1ca90990c5d3d39e721730 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zip-mp3-a-lbum-do-wnload-new-coexist-l4rjg-vsisft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbda29687ce05eceb8a7140f99fe1073db44c499a2817a3334aba733cda1eb29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9339 Malicious code in avail-able-albu-m-down-load-114925-rainier-fog-nuh7o-acneyh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab72642b19573c9e24f11f0ecbf3726e03c29dc2bd1ca90990c5d3d39e721730 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9388 Malicious code in new-al-bum-av-ailable-21031-its-a-big-daddy-thing-funka-zsdlac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b46c361960608f6d3a9f73b38d5e9167514b06e760cb88b6144307a94420875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9401 Malicious code in zip-mp3-a-lbum-do-wnload-new-in-the-future-vrf78-daqfza (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91e46e5ef66303112352a974ee7bc6779610608153a5c47dc2c5693586b6c6b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9345 Malicious code in availab-le-alb-um-zip-26387-this-is-the-second-album-of-a-band-called-adebisi-shank-pdmrd-ikxtvt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e49a7981d176acea58956a8041e33887f222b2775dc802bf49a49e1a733998 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9323 Malicious code in a-vailable-al-bum-file-23119-street-dad-ag8vh-ijreit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b5276135680bddef41a18bed1c6be249d035bc781dec3eefb1284f95b284ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9342 Malicious code in avail-able-albu-m-down-load-2014-19330-ultimate-painting-yx7k2-dkxzow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a7296fbdfdba291f43b1412910adb21a14eeeb9f4aa7f69bcee0466370011d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9344 Malicious code in availab-le-alb-um-zip-25931-the-life-aquatic-studio-sessions-mocn6-tnmvnd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 079687bc4eb89b80d1248111bbcffc5f68f4db1447a830acc63113bc230361a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9319 Malicious code in a-lbum-do-wnload-avai-lable-file-2016-44588-my-wild-west-fzmj0-gpjzue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23d227e690fcb2c6fa40eb050274026415cc858c76009d5e255816dae180ffec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9400 Malicious code in zip-mp3-a-lbum-do-wnload-new-gift-of-screws-q2h3s-xswcix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c826accfd7196480d4adb24ef7362a9ac257c5a2b760e84f936624e6147e724 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Wordpress Photo Album Plus plugin <= 8.8.05.003 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Noah Stead TurtleBurg in WordPress Plugin WP Photo Album Plus versions = 8.8.05.003...

WordPress WP Photo Album Plus Plugin <= 8.8.05.003 is vulnerable to Cross Site Scripting (XSS)

Software WP Photo Album Plus Type Plugin Vulnerable versions = 8.8.05.003 Fixed in 8.8.07.004 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9951 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 361cb23fe9c7 Credits Noah...

CVE-2024-46605: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component /admin.php?page=album of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field...

CVE-2024-46333

An authenticated cross-site scripting XSS vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Album Name parameter under the Add Album function...

PT-2024-31963 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo version 14.5.0 Description: The issue is an authenticated cross-site scripting XSS vulnerability that allows attackers to execute arbitrary web scripts or HTML. This is achieved by injecting a crafted payload into the Album Name...

CVE-2024-46333

An authenticated cross-site scripting XSS vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Album Name parameter under the Add Album function...

CVE-2024-46333

An authenticated cross-site scripting XSS vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Album Name parameter under the Add Album function...

CVE-2024-46333: Improper Neutralization of Input During Web Page Generation

An authenticated cross-site scripting XSS vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Album Name parameter under the Add Album function...