1853 matches found
Nuxt Icon < 1.4.5 Server-Side Request Forgery
Nuxt Icon versions prior to 1.4.5 are vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs in the icon fetching functionality. An attacker can exploit this vulnerability by providing a malicious URL that points to an internal or restricted resource,...
CVE-2025-58837
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-g (npm)
The package @zalastax/nolb-hyperfunfluentui-icon-g was found to contain malicious code...
MAL-2025-43013 Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-e (npm)
The package @zalastax/nolb-hyperfunfluentui-icon-e was found to contain malicious code...
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-e (npm)
The package @zalastax/nolb-hyperfunfluentui-icon-e was found to contain malicious code...
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-f (npm)
The package @zalastax/nolb-hyperfunfluentui-icon-f was found to contain malicious code...
MAL-2025-43014 Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-f (npm)
The package @zalastax/nolb-hyperfunfluentui-icon-f was found to contain malicious code...
MAL-2025-44265 Malicious code in filigron-icon (npm)
The package filigron-icon was found to contain malicious code...
Malicious code in filigron-icon (npm)
The package filigron-icon was found to contain malicious code...
CVE-2025-58837
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...
CVE-2025-58837 WordPress SS Font Awesome Icon Plugin <= 4.1.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...
CVE-2025-58837
CVE-2025-58837 : WordPress SS Font Awesome Icon plugin (versions
CVE-2025-58837 WordPress SS Font Awesome Icon Plugin <= 4.1.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...
WordPress SS Font Awesome Icon Plugin <= 4.1.3 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Mika in WordPress Plugin SS Font Awesome Icon versions = 4.1.3...
PT-2025-36176
Name of the Vulnerable Software and Affected Versions: Shiful H SS Font Awesome Icon versions through 4.1.3 Description: The software contains a cross-site scripting XSS issue that allows for stored XSS attacks. This occurs due to improper neutralization of input during web page generation...
Malicious Package
Overview tailwind-react-icon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in tailwind-react-icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5127a22fb572ebcffe8d5b7a31ef0ceeedc9113e7e1666b1a23384f0ae3cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-42140 Malicious code in tailwind-react-icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5127a22fb572ebcffe8d5b7a31ef0ceeedc9113e7e1666b1a23384f0ae3cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ASB-A-366403307
In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...