1878 matches found
CVE-2024-47604 XSS vulnerability in NuGetGallery HTML attributes handling
NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser...
NuGet Gallery 跨站脚本漏洞
NuGet Gallery is a NuGet open source package repository that supports NuGet. A cross-site scripting vulnerability exists in NuGet Gallery. An attacker could exploit this vulnerability to execute arbitrary HTML or Javascript code in the victim's browser...
PT-2024-32668 · Microsoft · Nuget Gallery
Name of the Vulnerable Software and Affected Versions: NuGet Gallery affected versions not specified Description: The NuGet Gallery has a security issue in its handling of HTML element attributes. This allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser...
gitea -- multiple issues
Problem Description: Replace v-html with v-text in search inputbox Fix nuget/conan/container packages upload bugs...
CVE-2024-40636
Steeltoe is an open source project that provides a collection of libraries that helps users build production-grade cloud-native applications using externalized configuration, service discovery, distributed tracing, application management, and more. When utilizing multiple Eureka server service UR...
CVE-2024-40636 Basic Auth Credential Leakage to Logs After Fetch Registry Error in Steeltoe.Discovery.Eureka with Peer Awareness
Steeltoe is an open source project that provides a collection of libraries that helps users build production-grade cloud-native applications using externalized configuration, service discovery, distributed tracing, application management, and more. When utilizing multiple Eureka server service UR...
NuGet Packages Exploited to Target Developers with Malware
NuGet packages are under attack! A new malware campaign exploits hidden code execution techniques to inject malware into…...
60 New Malicious Packages Uncovered in NuGet Supply Chain Attack
Threat actors have been observed publishing a new wave of malicious packages to the NuGet package manager as part of an ongoing campaign that began in August 2023, while also adding a new layer of stealth to evade detection. The fresh packages, about 60 in number and spanning 290 versions,...
CVE-2024-38081
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...
Malicious code in xopxopxopxopxopx (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4705 Malicious code in xopxopxopxopxopx (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in testt22esttest (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4687 Malicious code in testt22esttest (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in psbuiId (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4618 Malicious code in psbuiId (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in dnlib.net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4472 Malicious code in dnlib.net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4616 Malicious code in ppy.osu.Game.Lib (NuGet)
--- -= Per source details. Do not edit below this line.=-...