MAL-2022-5401 Malicious code in polaris-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb96b8a0229b6d2dac86029266a0106019f5ee4ffbe68e10a5a88a39865d60f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1163 Malicious code in atomic-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f545fc86c099730890c2468a3b7fc0a7fd60e890c19cfd63721aea0c617718d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atomic-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f545fc86c099730890c2468a3b7fc0a7fd60e890c19cfd63721aea0c617718d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Learn Cybersecurity with Palo Alto Networks Through this PCCSA Course @ 93% OFF

In the world of cybersecurity, reputation is everything. Most business owners have little understanding of the technical side, so they have to rely on credibility. Founded back in 2005, Palo Alto Networks is a cybersecurity giant that has earned the trust of the business community thanks to its...

PT-2025-8643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel's dm-log code has been identified, where the region bitmap size is rounded up to 32 bits, but the allocated region is accessed using unsigned long pointers by t...

Stack overflow

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer overflow vulnerability affects PJSIP users that use STUN in their...

CVE-2022-32195

Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL...

CVE-2022-32195

Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL...

PT-2022-21146

Name of the Vulnerable Software and Affected Versions Open edX platform versions prior to 2022-06-06 Description The issue allows for XSS via the next parameter in the logout URL. Recommendations For versions prior to 2022-06-06, update to a version released after 2022-06-06 to resolve the issue...

CVE-2022-32195: Improper Neutralization of Input During Web Page Generation

Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL...

PT-2022-7890

Name of the Vulnerable Software and Affected Versions The Next Generation of Genealogy Sitebuilding versions up to 11.1.0 Description A critical issue has been found in the processing of the file /timeline2.php, where the manipulation of the primaryID argument leads to sql injection. The attack c...

CVE-2017-20017: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in The Next Generation of Genealogy Sitebuilding up to 11.1.0. This issue affects some unknown processing of the file /timeline2.php. The manipulation of the argument primaryID leads to sql injection. The attack may be initiated...

MAL-2022-4825 Malicious code in next-plugin-normal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a774bb288c6816fa84250343f6d4d0e0e237b278afc1cbe10e3ea47cd7057772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next-plugin-normal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a774bb288c6816fa84250343f6d4d0e0e237b278afc1cbe10e3ea47cd7057772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-4231

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

Angular 跨站脚本漏洞

Angular is a development platform. It is used to build mobile and desktop web applications using Typescript / JavaScript and other languages. A security vulnerability exists in Angular version 11.0.4, 11.1.0-next.2, which stems from the fact that HTML does not specify any method to escape text in...

@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2022-29214 via next-auth (3.1.0)

next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2022-29214 Source advisory: OSV:GHSA-Q2MX-J4X2-2H74...

GHSA-7J3X-XM4J-JFJ7 Missing permission checks in Jenkins Warnings Next Generation Plugin allow listing workspace contents

Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform permission checks in methods implementing form validation. This allows attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...

Sandbox bypass vulnerability in Jenkins Script Security Plugin

Jenkins Script Security Plugin provides a sandbox feature that allows low privileged users to define scripts, including Pipelines, that are generally safe to execute. Calls to code defined inside a sandboxed script are intercepted, and various allowlists are checked to determine whether the call ...

GHSA-CCR8-4XR7-CGJ3 Sandbox bypass vulnerability in Jenkins Script Security Plugin

Jenkins Script Security Plugin provides a sandbox feature that allows low privileged users to define scripts, including Pipelines, that are generally safe to execute. Calls to code defined inside a sandboxed script are intercepted, and various allowlists are checked to determine whether the call ...