1008 matches found
Malicious Package
Overview spider-bot is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using spider-bot...
Malicious Package
Overview alephantpublisher-request is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...
Malicious Package
Overview application-module is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...
Malicious Package
Overview adncli is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using adncli altogether...
Malicious Package
Overview activerecordimplicit-order is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...
Malicious Package
Overview buntopress is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using buntopress...
WordPress Plugin LearnDash LMS 3.1.2 - Reflective Cross-Site Scripting
Exploit Title: LearnDash WordPress LMS Plugin 3.1.2 - Reflective Cross-Site Scripting Date: 2020-01-14 Vendor Homepage: https://www.learndash.com Vendor Changelog: https://learndash.releasenotes.io/release/uCskc-version-312 Exploit Author: Jinson Varghese Behanan Author Advisory:...
CVE-2019-16752
An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...
CVE-2019-16752
An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...
Design/Logic Flaw
An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...
CVE-2019-16752
An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...
CVE-2019-16752
CVE-2019-16752 concerns a vulnerability in Decentralized Anonymous Payment System (DAPS) present through 2019-08-26 that can cause wallets to send HTTP requests to arbitrary locations, potentially leaking a user’s IP and usage. Affected products/versions explicitly mentioned include Dash Core up ...
WordPress client-dash plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. client-dash is a permission management plugin used in it. A cross-site scripting vulnerability exists in the WordPress client-dash...
Optimizing Video Streaming Performance with Origin-Assisted Prefetching
Online video streaming is everywhere today. It's available on the smallest hand-held devices to the largest of screens in our living rooms. Magically and for the most part, it works and provides a very captivating experience. However, if you step back to look at the overall architecture, media...
CVE-2019-17071
The client-dash aka Client Dash plugin 2.1.4 for WordPress allows XSS...
CVE-2019-17071
The client-dash aka Client Dash plugin 2.1.4 for WordPress allows XSS...
Cross site scripting
The client-dash aka Client Dash plugin 2.1.4 for WordPress allows XSS...
CVE-2019-17071
The CVE-2019-17071 entry concerns the WordPress Client Dash plugin (version 2.1.4) which is vulnerable to Cross-Site Scripting (XSS). Connected documents detail that this vulnerability is a stored XSS via admin settings, exploitable by authenticated attackers with administrator-level privileges (...