PT-2023-27592 · Unknown · Lasso Simple Urls

Name of the Vulnerable Software and Affected Versions: Lasso Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management versions n/a through 118 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting...

`lasso-rs` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the user Kraded to run an arbitrary malware payload on Windows hosts. This advisory is to retrospectively document this attempted attack. The version information and download records of the malicious crate are no longer available...

RUSTSEC-2023-0107 `lasso-rs` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the user Kraded to run an arbitrary malware payload on Windows hosts. This advisory is to retrospectively document this attempted attack. The version information and download records of the malicious crate are no longer available...

CVE-2023-45606

Cross-Site Request Forgery CSRF vulnerability in Lasso Simple URLs plugin = 120 versions...

CVE-2023-45606

Cross-Site Request Forgery CSRF vulnerability in Lasso Simple URLs plugin = 120 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Lasso Simple URLs plugin = 120 versions...

CVE-2023-45606

CVE-2023-45606 is a CSRF vulnerability in the WordPress plugin Simple URLs (Link Cloaking, etc.) for versions up to 120. The issue enables Cross-Site Request Forgery without authentication, potentially allowing attackers to trigger unwanted actions on behalf of logged-in users. Public details fro...

CVE-2023-40667

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lasso Simple URLs plugin = 117 versions...

CVE-2023-40667

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lasso Simple URLs plugin = 117 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lasso Simple URLs plugin = 117 versions...

CVE-2023-40667 WordPress Simple URLs Plugin <= 117 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lasso Simple URLs plugin = 117 versions...

CVE-2023-40667

CVE-2023-40667: Unauthenticated Reflected Cross-Site Scripting in WordPress Simple URLs plugin affecting versions

PT-2023-27587 · Unknown · Lasso Simple Urls

Name of the Vulnerable Software and Affected Versions: Lasso Simple URLs plugin versions = 117 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal user da...

DEBIAN-CVE-2023-26487

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.lassoAppend' function accepts 3 arguments and internally invokes push function on the 1st argument specifying array consisting of 2nd and 3rd arguments as push call argument...

K02151228: Lasso XML signature wrapping vulnerability CVE-2021-28091

Security Advisory Description Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature. CVE-2021-28091 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the currently support...

SUSE CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

lasso bug fix and enhancement update

An update is available for lasso. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...

CVE-2021-28091 affecting package lasso for versions less than 2.8.0-1

CVE-2021-28091 affecting package lasso for versions less than 2.8.0-1. An upgraded version of the package is available that resolves this issue...

new packages: lasso

An update is available for lasso. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

NewStart CGSL CORE 5.04 / MAIN 5.04 : lasso Vulnerability (NS-SA-2022-0011)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has lasso packages installed that are affected by a vulnerability: - Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature. CVE-2021-28091 Note that Nessus has not tested for this issue but ha...