Malicious code in allianz-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5206dbf9ed839ec30f1f181c10bf1b267787c0255ef6048e6fcc0fec427faf9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-88 Malicious code in allianz-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5206dbf9ed839ec30f1f181c10bf1b267787c0255ef6048e6fcc0fec427faf9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 36 Update: rust-silver-2.0.1-4.fc36

Cross-shell customizable powerline-like prompt with icons...

[SECURITY] Fedora 37 Update: rust-silver-2.0.1-4.fc37

Cross-shell customizable powerline-like prompt with icons...

WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Material Design Icons for Page Builders Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24374 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ca964ff46b5b Credits...

WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Material Design Icons for Page Builders Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-24382 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 778ff03d1519...

Material Design Icons for Page Builders < 1.4.3 - Settings Update via CSRF

The plugin does not have CSRF check when updating its settings, which could allow attackers to make logged in admins perform such actions via a CSRF attack...

Huawei EMUI and HarmonyOS Security Bypass Vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is to provide a full-scenario distributed operating system based on microkernel. A security bypass vulnerability exists in Huawei EMUI and HarmonyOS.The vulnerability is caused due to dynamic hiding and restoring...

CVE-2022-46761

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

CVE-2022-46761

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

Design/Logic Flaw

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

CVE-2022-46761

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

PT-2023-15019 · Systemd · System

Name of the Vulnerable Software and Affected Versions: System affected versions not specified Description: The issue concerns a problem that may cause dynamic hiding and restoring of app icons. Successful exploitation of this issue may cause malicious hiding of app icons. Recommendations: At the...

CVE-2022-46761

CVE-2022-46761 concerns Huawei EMUI and HarmonyOS. Connected sources describe a vulnerability causing dynamic hiding/restoring of app icons, a security bypass that could enable malicious hiding of icons. The CVE notes a high severity (CVSS v3.1: 7.5, Network attack vector, Low complexity, No priv...

CVE-2022-46761: Incorrect Default Permissions

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

PT-2022-7786 · Unknown · Yuna Scatari Tbdev

Name of the Vulnerable Software and Affected Versions: Yuna Scatari TBDev versions up to 2.1.17 Description: A vulnerability has been found in Yuna Scatari TBDev, classified as problematic. The issue affects the function get user icons of the file usersearch.php. The manipulation of the argument...

CVE-2022-3858: Undefined Security Weakness

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button WordPress plugin before 3.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin...

WordPress SVG Icons Plugin Arbitrary File Upload (CVE-2022-0863)

An arbitrary file upload vulnerability exists in WordPress SVG Icons plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

OPENSUSE-SU-2022:10219-1 Security update for opera

This update for opera fixes the following issues: Update to 93.0.4585.11 - CHR-9051 Update chromium on desktop-stable-107-4585 to 107.0.5304.88 - DNA-95965 Add support for more UD TLDs - DNA-102960 Replace messengers icons - DNA-102964 Crash at -FramedBrowserWindow sendEvent: - DNA-103125...

Concrete CMS vulnerable to Reflected Cross-Site Scripting via dashboard icons

Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the dashboard icons due to un-sanitized output. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+...