26059 matches found
CVE-2022-30118
Title for CVE: XSS in /dashboard/system/express/entities/forms/savecontrol/GUID: old browsers only.Description: When using Internet Explorer with the XSS protection disabled, editing a form control in an express entities form for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 can...
CVE-2022-30119
The CVE-2022-30119 entry concerns a Cross-Site Scripting (XSS) vulnerability in Concrete CMS, specifically in the /dashboard/reports/logs/view path. The vulnerability arises from insufficient sanitization/output of built URLs, enabling XSS on older browsers when Internet Explorer XSS protection i...
CVE-2022-30119
XSS in /dashboard/reports/logs/view - old browsers only. When using Internet Explorer with the XSS protection disabled, insufficient sanitation where built urls are outputted can be exploited for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2. This cannot be exploited in modern-da...
CVE-2022-30119
XSS in /dashboard/reports/logs/view - old browsers only. When using Internet Explorer with the XSS protection disabled, insufficient sanitation where built urls are outputted can be exploited for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2. This cannot be exploited in modern-da...
Malicious Package
Overview metamask-state-log-explorer is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...
Malicious Package
Overview blockchain-explorer-sdk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
RIG Exploit Kit Now Infects Victims' PCs With Dridex Instead of Raccoon Stealer
The operators behind the Rig Exploit Kit have swapped the Raccoon Stealer malware for the Dridex financial trojan as part of an ongoing campaign that commenced in January 2022. The switch in modus operandi, spotted by Romanian company Bitdefender, comes in the wake of Raccoon Stealer temporarily...
Malicious code in nf-data-explorer-2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08e6ef5a1e7e5e63c54f55e2926f9f598e19e873311f5bd9f9502d7d7dda7210 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4835 Malicious code in nf-data-explorer-2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08e6ef5a1e7e5e63c54f55e2926f9f598e19e873311f5bd9f9502d7d7dda7210 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in amplify-graphiql-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1d3e576fc6b5204dca87f9ac269c183497998d162c90a7dcabf36447fa318ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-980 Malicious code in amplify-graphiql-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1d3e576fc6b5204dca87f9ac269c183497998d162c90a7dcabf36447fa318ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ng-json-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c929b216a8bdc5a5892394c3d241adfcc149c0cf91d865d3a45dd312461aa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4845 Malicious code in ng-json-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c929b216a8bdc5a5892394c3d241adfcc149c0cf91d865d3a45dd312461aa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2354 Malicious code in datanode-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00d1448b8e6f940f88898c792caf2dee90ce774b871651177f974d3f73810b43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in datanode-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00d1448b8e6f940f88898c792caf2dee90ce774b871651177f974d3f73810b43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bchd-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166931350aad3aa790df4d5471c56a7a9a9be8c60e5cc9b35e7fb1842d9bbc4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1479 Malicious code in bchd-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166931350aad3aa790df4d5471c56a7a9a9be8c60e5cc9b35e7fb1842d9bbc4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in asana-api-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bd31cc93d32eb43f77dc893e6c6cb020b5118808483c3e5e8d3ee4cf66b9cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1129 Malicious code in asana-api-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bd31cc93d32eb43f77dc893e6c6cb020b5118808483c3e5e8d3ee4cf66b9cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
