Firework

⚠️ NOTE: This tool is no longer under active maintenance. Firework Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process. The tool also wraps some code from Responder to leverage its ability to capture NetNTLM hashes...

WordPress New Year Firework <=1.1.9 - Cross-Site Scripting Detection

WordPress New Year Firework 1.1.9 and before contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authenticati...

EUVD-2016-1084

Malware in sbrugna...

EUVD-2024-45540

Malicious code in bioql PyPI...

CVE-2024-51781

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stefan Backor Firework Shoppable Live Video firework-videos allows Reflected XSS.This issue affects Firework Shoppable Live Video: from n/a through = 6.3...

CVE-2024-51781 WordPress Firework Shoppable Live Video plugin <= 6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Loop Now Technologies, Inc. Firework Shoppable Live Video allows Reflected XSS.This issue affects Firework Shoppable Live Video: from n/a through 6.3...

CVE-2024-51781 WordPress Firework Shoppable Live Video plugin <= 6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stefan Backor Firework Shoppable Live Video firework-videos allows Reflected XSS.This issue affects Firework Shoppable Live Video: from n/a through = 6.3...

PT-2024-34907 · Unknown · Firework Shoppable Live Video

Name of the Vulnerable Software and Affected Versions: Firework Shoppable Live Video versions n/a through 6.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

CVE-2024-51781: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stefan Backor Firework Shoppable Live Video firework-videos allows Reflected XSS.This issue affects Firework Shoppable Live Video: from n/a through = 6.3...

WordPress plugin Firework Shoppable Live Video has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Firework Shoppable Live Video plugin <= 6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Firework Shoppable Live Video versions = 6.3...

WordPress Firework Shoppable Live Video Plugin <= 6.3 is vulnerable to Cross Site Scripting (XSS)

Software Firework Shoppable Live Video Type Plugin Vulnerable versions = 6.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51781 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a80a55038a62 Credits João Pedro S Alcântara...

Wordpress new-year-firework plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language, which supports the setting up of personal blog sites on servers with PHP and MySQL. new-year-firework is one of the plug-ins for creating new campaigns. A cross-site scripting vulnerabilit...

CVE-2016-1000140

Reflected XSS in wordpress plugin new-year-firework v1.1.9...

Cross site scripting

Reflected XSS in wordpress plugin new-year-firework v1.1.9...

CVE-2016-1000140

Reflected XSS in wordpress plugin new-year-firework v1.1.9...

CVE-2016-1000140

The CVE-2016-1000140 entry concerns the WordPress plugin New Year Firework, affected

PT-2016-4532

Name of the Vulnerable Software and Affected Versions wordpress plugin new-year-firework version 1.1.9 Description The issue is related to a Reflected XSS in the wordpress plugin new-year-firework. Recommendations For version 1.1.9, update to a newer version that contains a fix for this issue...

CVE-2016-1000140: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin new-year-firework v1.1.9...

New Year Firework <= 1.1.9 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The new-year-firework WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/new-year-firework/firework/index.php?text="alert1;"...