CVE-2023-49817: Missing Authorization

Missing Authorization vulnerability in heoLixfy Flexible Woocommerce Checkout Field Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Woocommerce Checkout Field Editor: from n/a through 2.0.1...

Trix cross-site scripting vulnerabilities

Trix is a Basecamp open source rich text editor for everyday writing. A cross-site scripting vulnerability exists in Trix versions prior to 2.1.9 and prior to 1.3.3. The vulnerability stems from the susceptibility to cross-site scripting attacks when malicious code is pasted, which may result in...

PT-2024-13807

Name of the Vulnerable Software and Affected Versions heoLixfy Flexible Woocommerce Checkout Field Editor versions n/a through 2.0.1 Description The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This...

MAL-2024-11227 Malicious code in editor-devel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7aadc3203cf919f8f9db8494d53d7f655b0cc7b396989337e9ff334a971e4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in editor-devel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7aadc3203cf919f8f9db8494d53d7f655b0cc7b396989337e9ff334a971e4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Advanced Options Editor plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Advanced Options Editor versions = 1.0...

WordPress Ni WooCommerce Bulk Product Editor plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Ni WooCommerce Bulk Product Editor versions = 1.4.5...

SQL Injection

moodle/moodle is vulnerable to SQL injection. The vulnerability is due to insufficient input validation or sanitization in the XMLDB editor tool, which allows attackers to inject and execute unauthorized SQL commands...

CVE-2024-10178: Improper Neutralization of Input During Web Page Generation

The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping on user supplied attribute...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

Malware in pixiv-novel-editor

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

CVE-2024-54675

MISP, an open-source cybersecurity metrics platform, contains a stored cross-site scripting (XSS) vulnerability in versions through 2.5.2 . The flaw is located in the app/webroot/js/workflows-editor/workflows-editor.js file and specifically affects the editor interface for ad-hoc workflows (also ...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

PT-2024-36401

Name of the Vulnerable Software and Affected Versions MISP versions through 2.5.2 Description The issue is related to stored Cross Site Scripting XSS in the editor interface for an ad-hoc workflow, specifically in the file app/webroot/js/workflows-editor/workflows-editor.js. Recommendations For...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

MISP security vulnerabilities

MISP is an open source software solution from MISP Open Source. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP 2.5.2 and earlier versions,...

CVE-2024-54675: Improper Neutralization of Input During Web Page Generation

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

gimp: PSD buffer overflow RCE

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSD file, possibly enabling the execution of unauthorized code within the GIMP process...