WordPress plugin Wp-D3 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2023-0536: Undefined Security Weakness

The Wp-D3 WordPress plugin through 2.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress Wp D3 Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Wp D3 Type Plugin Vulnerable versions = 2.4.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0536 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 29e185ae78e3 Credits István Márton Required privile...

Security Bulletin: Vulnerability in d3-color affects IBM Process Mining . WS-2022-0322

Summary There is a vulnerability in d3-color that could allow an attacker to execute a DOS on the system. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details IBM X-Force ID: 212233 DESCRIPTION: d3-color i...

Regular Expression Denial Of Service (ReDoS)

d3-color is vulnerable to regular expression denial of service. The vulnerability exists due to an ambiguous regular expression allowing an attacker to exploit the vulnerability by causing backtracking via a maliciously crafted string...

d3-color vulnerable to ReDoS

The d3-color module provides representations for various color spaces in the browser. Versions prior to 3.1.0 are vulnerable to a Regular expression Denial of Service. This issue has been patched in version 3.1.0. There are no known workarounds...

011xwztpjn (1.0.0), 02y9dg4qm3 (1.0.0) +13732 more potentially affected by unknown CVE via d3-color (>=1.0.2, <=3.0.1)

d3-color NPM version =1.0.2, =3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on d3-color and may be impacted: - 011xwztpjn 1.0.0 - 02y9dg4qm3 1.0.0 - 04tw75kmd9 1.0.0 - 0650teqqly 1.0.0 - 097oi25ils 1.0.0 - 0a0fpniotn 1.0.0 - 0c7j76u46q 1.0.0 -...

GHSA-36JR-MH4H-2G58 d3-color vulnerable to ReDoS

The d3-color module provides representations for various color spaces in the browser. Versions prior to 3.1.0 are vulnerable to a Regular expression Denial of Service. This issue has been patched in version 3.1.0. There are no known workarounds...

Malicious code in -d3-ushape (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5050cbaa4ba008d418761efe66e6a0b72e96100c4fdc95efc833b5bbf139ae3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

d3.capsf.ar Cross Site Scripting vulnerability OBB-2825031

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AutomationDirect DirectLOGIC with Serial Communication

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Low attack complexity Vendor: AutomationDirect Equipment: DirectLOGIC with Serial Communication Vulnerability: Cleartext Transmission of Sensitive Information 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to the original...

new packages: js-d3-flame-graph

An update is available for js-d3-flame-graph. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

ALBA-2022:1784 js-d3-flame-graph bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

js-d3-flame-graph bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

js-d3-flame-graph bug fix and enhancement update

An update is available for js-d3-flame-graph. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Automating your Microsoft security suite with D3 XGEN SOAR

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. There are certain pain points in the average security operations center SOC that, no matter what else changes in the security landscape, stay among the most entrenched problems. You...

Automating your Microsoft security suite with D3 XGEN SOAR

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. There are certain pain points in the average security operations center SOC that, no matter what else changes in the security landscape, stay among the most entrenched problems. You...

yourstore-d3.envoidunet.com Cross Site Scripting vulnerability OBB-2468772

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

@frostoven/alkalurops (>=1.28.2, <=1.28.5), @h5web/app (>=0.1.0-beta.1, <=4.2.0-beta.1) +14 more potentially affected by unknown CVE via d3-color (3.0.1)

d3-color NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on d3-color and may be impacted: - @frostoven/alkalurops =1.28.2, =0.1.0-beta.1, =0.1.0-beta.0, =0.1.1, =1.0.1, =0.2.0, =0.1.6, =0.1.1, =0.2.0, =0.2.0, =0.0.2, =0.3.0, =0.1.0, =0.3...

Regular Expression Denial of Service (ReDoS)

Overview d3-color is a Color spaces! RGB, HSL, Cubehelix, Lab and HCL Lch. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the rgb and hrc functions. PoC by Yeting Li: var d3Color = require"d3-color" // d3Color.rgb"rgb255,255,255" function...