Lucene search
+L

2980 matches found

Github Security Blog
Github Security Blog
•added 2024/11/05 2:33 p.m.•3 views

Malware in puppeteer-extra-plugin-adblokcer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/11/05 2:33 p.m.•20 views

MAL-2024-10397 Malicious code in puppeteer-extra-plugin-adblokcer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50389c28817c90850d22eeb10abc234f6b3cd67eb0c8677c347551931d46144c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/04 1:34 a.m.•12 views

Malicious code in pupeteer-extra-plugin-adblocker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfffdf6c32cb0c90da6d3c8ba90795b20263639632de94ffa38855818054b745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/04 1:34 a.m.•1 views

Malware in pupeteer-extra-plugin-adblocker

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/11/04 1:34 a.m.•9 views

MAL-2024-10335 Malicious code in pupeteer-extra-plugin-adblocker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfffdf6c32cb0c90da6d3c8ba90795b20263639632de94ffa38855818054b745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/04 1:31 a.m.•9 views

Malicious code in puppeteer-extra-stealth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b37fbc6ab229a243ce69502d1a45b114b8b4c6318a961389367378d664f35b03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2024/11/04 1:31 a.m.•12 views

MAL-2024-10341 Malicious code in puppeteer-extra-stealth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b37fbc6ab229a243ce69502d1a45b114b8b4c6318a961389367378d664f35b03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/04 1:31 a.m.•3 views

Malware in puppeteer-extra-stealth

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/10/29 12:15 p.m.•23 views

CVE-2024-49654

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Marian Heddesheimer Extra Privacy for Elementor allows Reflected XSS.This issue affects Extra Privacy for Elementor: from n/a through 0.1.3...

6.1CVSS5.8AI score0.00306EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/29 12:15 p.m.•39 views

CVE-2024-49654

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marian Heddesheimer Extra Privacy for Elementor extra-privacy-for-elementor allows Reflected XSS.This issue affects Extra Privacy for Elementor: from n/a through = 0.1.3...

7.1CVSS0.00306EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/29 11:58 a.m.•18 views

CVE-2024-49654 WordPress Extra Privacy for Elementor plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marian Heddesheimer Extra Privacy for Elementor extra-privacy-for-elementor allows Reflected XSS.This issue affects Extra Privacy for Elementor: from n/a through = 0.1.3...

7.1CVSS5.9AI score0.00306EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/29 11:58 a.m.•72 views

CVE-2024-49654

CVE-2024-49654: Reflected XSS in WordPress plugin Extra Privacy for Elementor (versions up to 0.1.3) due to improper input neutralization during web page generation. Public details show affected version range but no patch/fix information is provided in the supplied documents.

7.1CVSS5.9AI score0.00306EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/10/29 11:58 a.m.•55 views

CVE-2024-49654 WordPress Extra Privacy for Elementor plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marian Heddesheimer Extra Privacy for Elementor extra-privacy-for-elementor allows Reflected XSS.This issue affects Extra Privacy for Elementor: from n/a through = 0.1.3...

7.1CVSS0.00306EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/29 12:00 a.m.•22 views

WordPress plugin Extra Privacy for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS6AI score0.00306EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•2 views

CVE-2024-49654: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marian Heddesheimer Extra Privacy for Elementor extra-privacy-for-elementor allows Reflected XSS.This issue affects Extra Privacy for Elementor: from n/a through = 0.1.3...

7.1CVSS5.8AI score0.00306EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/29 12:00 a.m.•22 views

PT-2024-33606 · Elementor · Extra Privacy For Elementor

Name of the Vulnerable Software and Affected Versions: Extra Privacy for Elementor versions 0.1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

7.1CVSS5.5AI score0.00306EPSS
SaveExploits0References5
OSV
OSV
•added 2024/10/28 9:15 p.m.•8 views

CVE-2024-44229

An information leakage was addressed with additional validation. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, Safari 18.1. Private browsing may leak some browsing history...

5.3CVSS5.8AI score0.00655EPSS
SaveExploits0References7
OSV
OSV
•added 2024/10/28 6:15 p.m.•18 views

CVE-2024-50446

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in FuturioWP Futurio Extra allows Stored XSS.This issue affects Futurio Extra: from n/a through 2.0.11...

5.4CVSS5.8AI score0.00261EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/28 6:15 p.m.•33 views

CVE-2024-50446

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FuturioWP Futurio Extra futurio-extra.This issue affects Futurio Extra: from n/a through = 2.0.11...

6.5CVSS0.00261EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/28 5:58 p.m.•21 views

CVE-2024-50446 WordPress Futurio Extra plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FuturioWP Futurio Extra futurio-extra.This issue affects Futurio Extra: from n/a through = 2.0.11...

6.5CVSS5.9AI score0.00261EPSS
SaveExploits0References1
Rows per page
Query Builder