Malicious code in react-dom-is (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a992e0b69df1d0c12f913e0477532f0900953868530bc27dc69063307359e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5641 Malicious code in react-dom-is (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a992e0b69df1d0c12f913e0477532f0900953868530bc27dc69063307359e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyte-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7431369925fe1450c5e92d750aef6efa49476ab665cc1c0d319c88dcf02d79e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4438 Malicious code in lyte-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7431369925fe1450c5e92d750aef6efa49476ab665cc1c0d319c88dcf02d79e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-instantsearch-hooks-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436eaaea08d9bd23560c9330c0c30b94c80a292e8bf007cf128e9846c8068075 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5649 Malicious code in react-instantsearch-hooks-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436eaaea08d9bd23560c9330c0c30b94c80a292e8bf007cf128e9846c8068075 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29455

DOM-based Reflected Cross-Site Scripting XSS vulnerability in Elementor's Elementor Website Builder plugin = 3.5.5 versions...

CVE-2022-29455

DOM-based Reflected Cross-Site Scripting XSS vulnerability in Elementor's Elementor Website Builder plugin = 3.5.5 versions...

Cross site scripting

DOM-based Reflected Cross-Site Scripting XSS vulnerability in Elementor's Elementor Website Builder plugin = 3.5.5 versions...

CVE-2022-29455 WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability

DOM-based Reflected Cross-Site Scripting XSS vulnerability in Elementor's Elementor Website Builder plugin = 3.5.5 versions...

Elementor < 3.5.6 - DOM Reflected Cross-Site Scripting

The plugin does not sanitise and escape user input appended to the DOM via malicious Lightbox settings, resulting in a DOM Cross-Site Scripting issue PoC...

PT-2022-3505 · Elementor · Elementor Website Builder

Name of the Vulnerable Software and Affected Versions: Elementor Website Builder plugin versions prior to 3.5.6 Description: The issue is related to insufficient protection of the webpage structure, allowing a remote attacker to perform cross-site scripting. This is a DOM-based Reflected Cross-Si...

Elementor < 3.5.6 - DOM Reflected Cross-Site Scripting

The plugin does not sanitise and escape user input appended to the DOM via malicious Lightbox settings, resulting in a DOM Cross-Site Scripting issue...

DOMDig - DOM XSS Scanner For Single Page Applications

DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can simulate a...

CVE-2017-20027

The CVE-2017-20027 issue affects HumHub up to version 1.0.1 and is described as a DOM-based cross-site scripting vulnerability stemming from lack of input/data filtering. The attack could be launched remotely and exploit details are publicly disclosed; upgrading to version 1.1.1 is listed as the ...

CVE-2017-20027 HumHub DOM cross site scriting

A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting DOM. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to...

CVE-2022-2029

Cross-site Scripting XSS - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0...

Cross site scripting

Cross-site Scripting XSS - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0...

CVE-2022-2029 Cross-site Scripting (XSS) - DOM in kromitgmbh/titra

Cross-site Scripting XSS - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0...

Client-Side RCE and Stored XSS via Unsafe Deserialization of Diagrams

Description The deserialization mechanism of diagram files is based on an XML like structure. When it is read, internal objects are created and properties on those can be set. Furthermore it allows calling any top-level constructor function and cloning of top level XML/HTML nodes. This has the...