MAL-2022-5960 Malicious code in sch-frontend-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8df0a30057039a07f47a29f52f2ae43e6fb46fb1e63983f39b4d26aa0f719ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reorgs-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b13830319a43af9887566ccebf66edc38aa622d4ef7464ffdaabfd9a41942ea1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cross-Site Scripting in TYPO3's Frontend Login Mailer

Meta CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C 4.9 Problem User submitted content was used without being properly encoded in HTML emails sent to users. The actually affected components were mail clients used to view those messages. Solution Update to TYPO3 versions 9.5.35...

GHSA-H4MX-XV96-2JGM Cross-Site Scripting in TYPO3's Frontend Login Mailer

Meta CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C 4.9 Problem User submitted content was used without being properly encoded in HTML emails sent to users. The actually affected components were mail clients used to view those messages. Solution Update to TYPO3 versions 9.5.35...

TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2022-004)

TYPO3 is prone to a cross-site scripting XSS vulnerability in the Frontend Login Mailer. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TYPO3-CORE-SA-2022-004: Cross-Site Scripting in Frontend Login Mailer

More info at https://typo3.org/security/advisory/typo3-core-sa-2022-004...

TYPO3-CORE-SA-2022-004: Cross-Site Scripting in Frontend Login Mailer

More info at https://typo3.org/security/advisory/typo3-core-sa-2022-004...

PT-2022-3505 · Elementor · Elementor Website Builder

Name of the Vulnerable Software and Affected Versions: Elementor Website Builder plugin versions prior to 3.5.6 Description: The issue is related to insufficient protection of the webpage structure, allowing a remote attacker to perform cross-site scripting. This is a DOM-based Reflected Cross-Si...

WordPress plugin Google Tag Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Malicious code in jira-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78600b96da64ce05b13bb5f2b89c1fc3458eea5abaad43f36d2784cb8926d938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4032 Malicious code in jira-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78600b96da64ce05b13bb5f2b89c1fc3458eea5abaad43f36d2784cb8926d938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6986 Malicious code in vt-blockchain-bootcamp-starter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1085597e357b5b1d2b12ab109ff9c279fa1cbca538e418cf962f34265384141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flipper-frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 745d70c1af1c5bc8882038e6eac687fd4ce85fa2d6b667c7c5ccef39ce54b877 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

flipper-server (>=0.171.1, <=0.212.0), flipper-server-companion (>=0.171.0, <=0.212.0) +1 more potentially affected by unknown CVE via flipper-frontend-core (>=0.171.0, <=0.212.0)

flipper-frontend-core NPM version =0.171.0, =0.171.1, =0.171.0, =0.171.1, =0.212.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-3074...

Malicious code in @logistics-frontend/hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a43e1ab76807eb59ac7f06d2c1ee7b9920fb053f9adb42e497819518dc71266 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-394 Malicious code in @logistics-frontend/modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4cfb4ef58af701fde6a6535d9f669a870e7ef44606fb659eba4368fb835340a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-397 Malicious code in @logistics-frontend/types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 917015e67d3524947bf6202269dd9d3b5ce19a12c03609c67b0c04073720abdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-395 Malicious code in @logistics-frontend/ndd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware affdd33b3ef985c7a2234ece7c7196fe737cc2a6bf9262d955b9ac46d7b57222 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @logistics-frontend/types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 917015e67d3524947bf6202269dd9d3b5ce19a12c03609c67b0c04073720abdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @logistics-frontend/modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4cfb4ef58af701fde6a6535d9f669a870e7ef44606fb659eba4368fb835340a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...