CVE-2023-5232

The Font Awesome More Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' shortcode in versions up to, and including, 3.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

PT-2023-31961 · WordPress · Font Awesome More Icons

Name of the Vulnerable Software and Affected Versions: Font Awesome More Icons plugin for WordPress versions up to, and including, 3.5 Description: The issue is related to Stored Cross-Site Scripting via the icon shortcode due to insufficient input sanitization and output escaping on user-supplie...

CVE-2023-5166

Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0...

Code injection

Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0...

CVE-2023-5166 Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL

Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0...

Docker Desktop Security Vulnerabilities

Docker Desktop is a container technology-based desktop software for lightweight deployment of applications from the U.S. company Docker. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

PT-2023-27756 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.1.1 of the stable branch Discourse versions prior to 3.2.0.beta1 of the beta and tests-passed branches Description: A malicious admin could create extremely large icons sprites, which would then be cached in each...

How to Change Desktop Icon for One Delivery Group

Modify the display icon for published desktop to use customized icons and/or point to use any existing icons...

How to add custom app icon in Android Play Store applications

...

CVE-2023-34187

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...

CVE-2023-34187

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...

CVE-2023-34187 WordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...

CVE-2023-34187 WordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...

WordPress plugin call-now-icon-animate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

MAL-2023-7913 Malicious code in mx-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e27c2bd463fb6e635283a0919ef523ad0109af9ed2731351db6548bc4364f858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mx-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e27c2bd463fb6e635283a0919ef523ad0109af9ed2731351db6548bc4364f858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2020-24292

Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted ico file...

UBUNTU-CVE-2020-24292

Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted ico file...

@maggioli-design-system/mds-icon (2.0.0-rc.1), esto-es-una-prueba-ui-components (1.0.0) potentially affected by CVE-2023-40013 via external-svg-loader (>=1.4.0, <=1.6.8)

external-svg-loader NPM version =1.4.0, =1.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on external-svg-loader and may be impacted: - @maggioli-design-system/mds-icon 2.0.0-rc.1 - esto-es-una-prueba-ui-components 1.0.0 Source cves: CVE-2023-40013...

Arbitrary file upload

Description Due to lack of file extension validation, privileged user administrator can upload arbitrary files with "update logo" and "update icon" features. The application uses the extension provided in the filename parameter. Proof of Concept POST /admin/default/jqadm/save/settings?locale=en...