Malicious code in tealium-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2379 Malicious code in float-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16fbe52219de9cd7b8c9f5658b325616af364ff7bc56e5ab012eb702baeed800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in float-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16fbe52219de9cd7b8c9f5658b325616af364ff7bc56e5ab012eb702baeed800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7085 Malicious code in @yieldstreet/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2895 Malicious code in @sber-sberx-prime/prime-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @sber-sberx-prime/prime-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3258 Malicious code in @esportal/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @esportal/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE: Security Advisory (SUSE-SU-2024:2173-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:2151-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-39993

Missing Authorization vulnerability in Wpmet Elements kit Elementor addons.This issue affects Elements kit Elementor addons: from n/a through 2.9.0...

CVE-2023-39993: Missing Authorization

Missing Authorization vulnerability in Wpmet Elements kit Elementor addons.This issue affects Elements kit Elementor addons: from n/a through 2.9.0...

PT-2024-12827

Name of the Vulnerable Software and Affected Versions Elements kit Elementor addons versions 2.9.0 and earlier Description The issue is related to a Missing Authorization vulnerability in the Wpmet Elements kit Elementor addons. Recommendations For versions 2.9.0 and earlier, update to a version...

WordPress plugin Elements kit Elementor addons security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

SUSE: Security Advisory (SUSE-SU-2024:2036-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-4479 Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sggeneraltoggletabenable and sgaccordionstyle attributes within the plugin's JKit - Tabs and JKit - Accordion widget, respectively, in all versions up to, and including, 2.6.5 due to insufficient input...

CVE-2024-4479

CVE-2024-4479: Jeg Elementor Kit for WordPress is affected by stored XSS via JKit - Tabs and JKit - Accordion widgets in versions up to 2.6.5. Exploitation requires at least Contributor-level authentication; the issue arises from insufficient input sanitization and output escaping. A fix is avail...

OPENSUSE-SU-2024:11696-1 kafka-kit-2.1.0-2.1 on GA media

These are all security issues fixed in the kafka-kit-2.1.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11838-1 kafka-kit-2.1.0-3.1 on GA media

These are all security issues fixed in the kafka-kit-2.1.0-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-4479: Improper Neutralization of Input During Web Page Generation

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sggeneraltoggletabenable and sgaccordionstyle attributes within the plugin's JKit - Tabs and JKit - Accordion widget, respectively, in all versions up to, and including, 2.6.5 due to insufficient input...