2276 matches found
PT-2023-27756 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.1.1 of the stable branch Discourse versions prior to 3.2.0.beta1 of the beta and tests-passed branches Description: A malicious admin could create extremely large icons sprites, which would then be cached in each...
How to Change Desktop Icon for One Delivery Group
Modify the display icon for published desktop to use customized icons and/or point to use any existing icons...
How to add custom app icon in Android Play Store applications
...
CVE-2023-34187
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...
CVE-2023-34187
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...
CVE-2023-34187 WordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...
CVE-2023-34187 WordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...
WordPress plugin call-now-icon-animate 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2023-34187: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...
Malicious code in mx-icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e27c2bd463fb6e635283a0919ef523ad0109af9ed2731351db6548bc4364f858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-7913 Malicious code in mx-icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e27c2bd463fb6e635283a0919ef523ad0109af9ed2731351db6548bc4364f858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in mx-icon
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
DEBIAN-CVE-2020-24292
Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted ico file...
UBUNTU-CVE-2020-24292
Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted ico file...
@maggioli-design-system/mds-icon (2.0.0-rc.1), esto-es-una-prueba-ui-components (1.0.0) potentially affected by CVE-2023-40013 via external-svg-loader (>=1.4.0, <=1.6.8)
external-svg-loader NPM version =1.4.0, =1.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on external-svg-loader and may be impacted: - @maggioli-design-system/mds-icon 2.0.0-rc.1 - esto-es-una-prueba-ui-components 1.0.0 Source cves: CVE-2023-40013...
Arbitrary file upload
Description Due to lack of file extension validation, privileged user administrator can upload arbitrary files with "update logo" and "update icon" features. The application uses the extension provided in the filename parameter. Proof of Concept POST /admin/default/jqadm/save/settings?locale=en...
Hide "Virtual Disk status" icon from System tray on the endpoints
Disable the vDisk status icon from being displayed within the system tray on the endpoints after launching ICA sessions against PVS provisioned VDAs...
CVE-2023-31853
Cudy LT400 1.13.4 is vulnerable Cross Site Scripting XSS in /cgi-bin/luci/admin/network/bandwidth via the icon parameter...
