Stored XSS in EditEstadoDocumento

Description In facturascripts/EditEstadoDocumento, the field Icon can be injected an XSS payload into it. Proof of Concept // PoC.js POST /facturascripts/EditEstadoDocumento?code=27&action=save-ok HTTP/1.1 Host: 127.0.0.1 Content-Length: 1224 Cache-Control: max-age=0 sec-ch-ua:...

Malicious code in ember-malibu-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23b2a42bd91fbae30356ea1a577b91c34c51ff581287780fbb36338dcb78a4a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @harrysforge/icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1c18e6ed5c1ebadaac3b5b8e4775f88140304ae0d97ab097dadcefdd907de2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shein-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 386e2f5ba0bfb4252a77d5c4f22efa158df543a3f4fba6cdeb5e7b8fe6e40e38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6083 Malicious code in shein-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 386e2f5ba0bfb4252a77d5c4f22efa158df543a3f4fba6cdeb5e7b8fe6e40e38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/svg-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf558b9a116b62aab931fcf875349acb6eb5f4171abaeac53c3fcdc8069f83b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-661 Malicious code in @tinkoff-react-bui/svg-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf558b9a116b62aab931fcf875349acb6eb5f4171abaeac53c3fcdc8069f83b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6748 Malicious code in ui-component-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9610c2f8d11b979d1eb35782d93fafa64ebfa1b8a1220d3ac0243f40beab69a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-component-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9610c2f8d11b979d1eb35782d93fafa64ebfa1b8a1220d3ac0243f40beab69a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress WP SVG Icons plugin remote code execution vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP SVG Icons plugin version 3.2.3 and prior versions contain a remote code execution...

CVE-2022-0863

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution...

MAL-2022-5176 Malicious code in package-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ee7402d49aeecdf40eecddd54c43432e034a74e4cbec83447f396485971eff1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ee7402d49aeecdf40eecddd54c43432e034a74e4cbec83447f396485971eff1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-13482 · WordPress · Wp Svg Icons

Name of the Vulnerable Software and Affected Versions: WP SVG Icons WordPress plugin versions 3.2.3 and earlier Description: The issue allows a high-privileged user, such as an admin, to upload a zip file containing malicious PHP code, leading to remote code execution. This is due to the plugin n...

GHSA-WRWQ-4F2H-QXJ8 Stored XSS vulnerability in Custom Job Icon Plugin

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

Stored XSS vulnerability in Custom Job Icon Plugin

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

brython-server (>=2.0.3, <=2.2.1), cimage (>=1.4.1, <=1.4.2) +7 more potentially affected by CVE-2020-5311 via pillow (2.9.0)

pillow PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - brython-server =2.0.3, =1.4.1, =0.0.1, =1.0.7, =0.6.1, =0.1.1, =0.5.28, =0.0.1.dev0, =1.0.0b1 Source cves: CVE-2020-5311 Source advisory:...

May 24, 2022—KB5014019 (OS Build 22000.708) Preview

None None...

new packages: hicolor-icon-theme

An update is available for hicolor-icon-theme. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: adwaita-icon-theme

An update is available for adwaita-icon-theme. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...