13 matches found
Malicious code in @mplay-frontend-ui/link (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f2d06b568af724d0c5db157ecd8894e51acca5e9f1ae3d965ca5775afe852e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-113915
Malicious code in eslint-config-cygnus-iota-link npm...
MAL-2025-5413 Malicious code in groq-link (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d886914bb5385499143228e52016dd35d42665bf6d71e77ef69b13c3bc9de00 Any computer that has this package installed or running should be considered...
MAL-2025-2650 Malicious code in blockzie-link (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3209d64326bd799c5863c01555419390a8c7b7973fa38222b434cea7838b6f81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Fedora 37 : drupal7-link (2022-e795e17c38)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-e795e17c38 advisory. - https://www.drupal.org/project/link/releases/7.x-1.11 - SA-CONTRIB-2022-034 - https://www.drupal.org/project/link/releases/7.x-1.10 -...
CKEditor Link Package Cross-Site Scripting Vulnerability
CKEditor formerly known as FCKeditor is a Polish company CKSource open source , web-based text editor . The editor is lightweight , easy to install , etc. Link package is one of the packages used to create the specified link . A cross-site scripting vulnerability exists in the Link package in...
Cross site scripting
Cross-site scripting XSS vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link A element...
CVE-2018-11093
Cross-site scripting XSS vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link A element...
CVE-2018-11093
Cross-site scripting XSS vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link A element...
CVE-2018-11093
Cross-site scripting XSS vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link A element...
CVE-2018-11093
Cross-site scripting XSS vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link A element...
CVE-2018-11093
CVE-2018-11093 describes a Cross-site Scripting (XSS) vulnerability in the CKEditor 5 Link package prior to 10.0.1. The issue arises from insufficient sanitization/escaping of the href attribute in a created link (A) element, enabling an attacker to inject arbitrary script when a crafted href is ...
