Malicious code in h5bp-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f10e6ae365af97b4c79f04f1355dd26a8862632b8ce77cf50da4b2195414716 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11168 Malicious code in h5bp-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f10e6ae365af97b4c79f04f1355dd26a8862632b8ce77cf50da4b2195414716 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mageia: Security Advisory (MGASA-2024-0376)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-11203: Improper Neutralization of Input During Web Page Generation

The EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘providername parameter in all versions up to, and including, 4.1.3 due t...

Important: Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.5 bugfix release

Red Hat Developer Hub 1.2.5 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

Fedora 37 : python3-docs / python3.11 (2022-a9a4c48d06)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-a9a4c48d06 advisory. The final release of Python 3.11.0. Contains security fix for CVE-2022-42919. Tenable has extracted the preceding description block directly from th...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

CVE-2024-48463

Bruno IDE Desktop versions prior to 1.29.1 are vulnerable to a command injection vulnerability (CWE-78) and unvalidated URL handling. The root cause is the use of Electron's shell.openExternal function within the Markdown docs viewer without proper validation of http or https protocols. This allo...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

CVE-2024-48463: URL Redirection to Untrusted Site

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

Malicious code in rentez-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d38f5182bdac1a9d1dc8a7edd04bf4887e39416ac443361fbe2b4de7341c0360 The OpenSSF Package Analysis project identified 'rentez-docs' @ 6.6.6 npm as malicious. It is considered malicious because: - The package...

CVE-2024-49672

Cross-Site Request Forgery CSRF vulnerability in Gifford Cheung, Brian Watanabe, Chongsun Ahn Google Docs RSVP allows Stored XSS.This issue affects Google Docs RSVP: from n/a through 2.0.1...

CVE-2024-49672

Cross-Site Request Forgery CSRF vulnerability in giffordcheung Google Docs RSVP google-docs-rsvp-guestlist allows Stored XSS.This issue affects Google Docs RSVP: from n/a through = 2.0.1...

CVE-2024-49672 WordPress Google Docs RSVP plugin <= 2.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in giffordcheung Google Docs RSVP google-docs-rsvp-guestlist allows Stored XSS.This issue affects Google Docs RSVP: from n/a through = 2.0.1...

CVE-2024-49672 WordPress Google Docs RSVP plugin <= 2.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in giffordcheung Google Docs RSVP google-docs-rsvp-guestlist allows Stored XSS.This issue affects Google Docs RSVP: from n/a through = 2.0.1...

CVE-2024-49672

CVE-2024-49672 concerns the Google Docs RSVP WordPress plugin (versions n/a through 2.0.1). The entry documents a CSRF that enables Stored Cross-Site Scripting (XSS) in affected installs. Public details across connected sources consistently describe the issue as a CSRF to stored XSS vulnerability...

WordPress plugin Google Docs RSVP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

CVE-2024-49672: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in giffordcheung Google Docs RSVP google-docs-rsvp-guestlist allows Stored XSS.This issue affects Google Docs RSVP: from n/a through = 2.0.1...

PT-2024-33624 · Google · Google Docs Rsvp

Name of the Vulnerable Software and Affected Versions: Google Docs RSVP versions n/a through 2.0.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability and Stored XSS in Google Docs RSVP. Recommendations: For versions n/a through 2.0.1, update to a version that...