MAL-2022-4709 Malicious code in mrg-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98790b51597ec490351af9018c107bea0bdce270bb99f317b5d4a2f45b8ddf7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mrg-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98790b51597ec490351af9018c107bea0bdce270bb99f317b5d4a2f45b8ddf7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress WP SVG Icons plugin remote code execution vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP SVG Icons plugin version 3.2.3 and prior versions contain a remote code execution...

CVE-2022-0863

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution...

CVE-2022-0863

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution...

Remote code execution

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution...

CVE-2022-0863 WP SVG Icons <= 3.2.3 - Admin+ Remote Code Execution (RCE)

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution...

CVE-2022-0863

The WP SVG Icons WordPress plugin (versions ≤ 3.2.3) is affected by an authenticated remote code execution vulnerability caused by improper validation of uploaded custom icon packs. An admin/high-privilege user can upload a ZIP containing malicious PHP code, leading to remote code execution. Publ...

Malicious code in icons-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f16013cafa394af5d5b60ce47cfd2dfc90909cd5cc111fef3573f1a78e7a687 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in packages-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e28465b0bfacf3bce2c0637945f2274d37fe6e7e9ba0e3a86ee6a5068d2f3495 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5187 Malicious code in packages-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e28465b0bfacf3bce2c0637945f2274d37fe6e7e9ba0e3a86ee6a5068d2f3495 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3758 Malicious code in icons-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f16013cafa394af5d5b60ce47cfd2dfc90909cd5cc111fef3573f1a78e7a687 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin WP SVG Icons 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP SVG Icons plugin version 3.2.3 and prior versions contain a remote code execution...

OPENSUSE-SU-2022:10001-1 Security update for pcmanfm

This update for pcmanfm fixes the following issues: update to 1.3.2: Fixed case when some keyboard shortcuts stopped working: Alt+Home, Alt+Up Fixed sytem reboot delayed for 90 seconds in some cases new upstream release of pcmanfm 1.3.1 fixed crash on reload while directory changes changed size o...

GHSA-HVMC-7G2X-R3P9 Jenkins Cross-Site Scripting vulnerability in help icons

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons. Tooltip values can be contributed by plugins, some of which use user-specified values. This results in a stored cross-site scripting XSS vulnerability. Jenkins 2.252, LTS 2.235.4 escapes the...

WordPress WP SVG Icons plugin <= 3.2.3 - Authenticated Remote Code Execution (RCE) vulnerability

Authenticated Remote Code Execution RCE vulnerability discovered by qerogram in WordPress WP SVG Icons plugin versions = 3.2.3. Solution Deactivate and delete. This plugin has been closed as of April 18, 2022 and is not available for download. This closure is temporary, pending a full review...

JetBrains Hub 跨站脚本漏洞

JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. A security vulnerability exists in versions prior to JetBrains Hub 2022.1.14638, which stems from an attack that stores cross-site scripting via...

CVE-2022-0840

The Easy Social Icons WordPress plugin before 3.2.1 does not properly escape the imagefile field when adding a new social icon, allowing high privileged users to inject arbitrary javascript even when the unfilteredhtml capability is disallowed...

CVE-2022-0840

The Easy Social Icons WordPress plugin before 3.2.1 does not properly escape the imagefile field when adding a new social icon, allowing high privileged users to inject arbitrary javascript even when the unfilteredhtml capability is disallowed...

Design/Logic Flaw

The Easy Social Icons WordPress plugin before 3.2.1 does not properly escape the imagefile field when adding a new social icon, allowing high privileged users to inject arbitrary javascript even when the unfilteredhtml capability is disallowed...