16 matches found
Malware in react-native-parallax-scroll-view-updated
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-3262 Malicious code in react-native-parallax-scroll-view-updated (npm)
Dependency confusion and typosquatting campaign by threat actor "saif777". Packages use inflated version numbers 9999.9999.9999, 9999.9999.10000, 50.50.50, 7.66.5 to win version resolution in environments with private registries. All active packages execute a postinstall hook "node index.js" that...
Malicious code in react-native-parallax-scroll-view-updated (npm)
Dependency confusion and typosquatting campaign by threat actor "saif777". Packages use inflated version numbers 9999.9999.9999, 9999.9999.10000, 50.50.50, 7.66.5 to win version resolution in environments with private registries. All active packages execute a postinstall hook "node index.js" that...
EUVD-2019-16955
Malware in sbrugna...
WordPress Parallax Scroll Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language , support for PHP and MySQL servers to set up a personal blog site . Parallax Scroll Plugin is used in one of the page scrolling effect plugin . A cross-site scripting vulnerability exists in the...
Parallax Scroll <= 2.0.1 - Cross-Site Scripting (XSS)
The Parallax Scroll by adamrob.co.uk WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress Parallax Scroll Plugin < 2.1 XSS Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
WordPress Parallax Scroll plugin <= 2.0.1 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability found by Adam Robinson in WordPress Parallax Scroll plugin version = 2.0.1. Solution Update the WordPress Parallax Scroll plugin to the latest available version at least 2.1...
Design/Logic Flaw
In the Parallax Scroll aka adamrob-parallax-scroll plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. "parallax" has a spelling change within the PHP filename...
CVE-2019-7413
In the Parallax Scroll aka adamrob-parallax-scroll plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. "parallax" has a spelling change within the PHP filename...
CVE-2019-7413
In the Parallax Scroll aka adamrob-parallax-scroll plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. "parallax" has a spelling change within the PHP filename...
CVE-2019-7413
CVE-2019-7413 concerns the WordPress plugin “Parallax Scroll” (adamrob-parallax-scroll). All documented sources indicate the vulnerability is a cross-site scripting (XSS) flaw in the shortcode handling: the file includes/adamrob-parralax-shortcode.php allows XSS via the title text, with a noted f...
CVE-2019-7413
In the Parallax Scroll aka adamrob-parallax-scroll plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. "parallax" has a spelling change within the PHP filename...
CVE-2019-7413
In the Parallax Scroll aka adamrob-parallax-scroll plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. "parallax" has a spelling change within the PHP filename...
PT-2019-18589
Name of the Vulnerable Software and Affected Versions Parallax Scroll plugin versions prior to 2.1 Description The issue allows for XSS via the title text in the includes/adamrob-parralax-shortcode.php file. Recommendations For versions prior to 2.1, update to version 2.1 or later to resolve the...
CVE-2019-7413: Improper Neutralization of Input During Web Page Generation
In the Parallax Scroll aka adamrob-parallax-scroll plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. "parallax" has a spelling change within the PHP filename...