1755 matches found
Malicious code in stylee-logo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57b986ab11403a14ac18370067dd40fc0a3deca0e7580b55605078ea441e720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1635 Malicious code in logo-stylee (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d393decd83d9e9777b1412a8994e72ccb1fdccc3a8157a431f4e72fe8553e717 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1639 Malicious code in stylee-logo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57b986ab11403a14ac18370067dd40fc0a3deca0e7580b55605078ea441e720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PHPVibe Cross-Site Scripting Vulnerability
PHPVibe is a free video management system from PHPVibe Inc. A cross-site scripting vulnerability exists in PHPVibe version 11.0.46, which stems from the fact that manipulation of the parameter site-logo-text can lead to cross-site scripting attacks...
PT-2024-37372 · Phpvibe · Phpvibe
Name of the Vulnerable Software and Affected Versions: PHPVibe version 11.0.46 Description: A problematic issue has been found in the Global Options Page component, specifically in the file functionalities.global.php. The manipulation of the site-logo-text argument leads to cross-site scripting...
CVE-2024-3288
The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-3288 Logo Slider < 4.0.0 - Contributor+ Stored XSS
The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
PT-2024-24935 · WordPress · Logo Slider
Name of the Vulnerable Software and Affected Versions: The Logo Slider WordPress plugin versions prior to 4.0.0 Description: The issue concerns the lack of validation and escaping of certain Slider Settings in the plugin, which could allow users with the contributor role and above to perform Stor...
WordPress plugin Logo Slider security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
GHSA-VWGF-7F9H-H499 Cross site scripting in zenml
A stored Cross-Site Scripting XSS vulnerability was identified in the zenml-io/zenml repository, specifically within the 'logourl' field. By injecting malicious payloads into this field, an attacker could send harmful messages to other users, potentially compromising their accounts. The...
Cross site scripting in zenml
A stored Cross-Site Scripting XSS vulnerability was identified in the zenml-io/zenml repository, specifically within the 'logourl' field. By injecting malicious payloads into this field, an attacker could send harmful messages to other users, potentially compromising their accounts. The...
PYSEC-2024-170
A stored Cross-Site Scripting XSS vulnerability was identified in the zenml-io/zenml repository, specifically within the 'logourl' field. By injecting malicious payloads into this field, an attacker could send harmful messages to other users, potentially compromising their accounts. The...
CVE-2024-2171
A stored Cross-Site Scripting XSS vulnerability was identified in the zenml-io/zenml repository, specifically within the 'logourl' field. By injecting malicious payloads into this field, an attacker could send harmful messages to other users, potentially compromising their accounts. The...
CVE-2024-2171 Stored XSS in zenml-io/zenml
A stored Cross-Site Scripting XSS vulnerability was identified in the zenml-io/zenml repository, specifically within the 'logourl' field. By injecting malicious payloads into this field, an attacker could send harmful messages to other users, potentially compromising their accounts. The...
PT-2024-19019 · Zenml · Zenml
Name of the Vulnerable Software and Affected Versions: zenml-io/zenml versions 0.55.3 through 0.55.3 Description: A stored Cross-Site Scripting XSS vulnerability was identified in the zenml-io/zenml repository, specifically within the logo url field. By injecting malicious payloads into this fiel...
ZenML Cross-Site Scripting Vulnerability
ZenML is an extensible open source MLOps framework for creating portable, production-ready machine learning pipelines. A cross-site scripting vulnerability exists in ZenML version 0.55.3, which stems from a stored cross-site scripting XSS vulnerability in the logourl field that allows an attacker...
Logo Manager For Enamad <= 0.7.0 - Stored XSS via CSRF
Description The plugin does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack PoC Make a logged in admin open an HTML file containing:...
Logo Manager For Enamad <= 0.7.0 - Stored XSS via CSRF
Description The plugin does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack Make a logged in admin open an HTML file containing: alert/XSS: enamad-code/" alert/XSS:...
UBUNTU-CVE-2024-36952
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered...