Lucene search
+L

10 matches found

Github Security Blog
Github Security Blog
•added 2024/12/19 11:12 a.m.•5 views

Malware in react-pillbox

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2024/12/07 3:45 p.m.•16 views

MAL-2024-11231 Malicious code in react-pillbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab745e5454a4aede527ec57bebcb7edd1700ad72e195f290ccf92b03eb3df0e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/07 3:45 p.m.•10 views

Malicious code in react-pillbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab745e5454a4aede527ec57bebcb7edd1700ad72e195f290ccf92b03eb3df0e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:12 p.m.•10 views

Malicious code in yahoo-react-pillbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ae5a29706a7f5bf5f9f2496dd7182f57b1fbee762f4951ff1cef1e63631b8f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/06/20 8:12 p.m.•20 views

MAL-2022-7312 Malicious code in yahoo-react-pillbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ae5a29706a7f5bf5f9f2496dd7182f57b1fbee762f4951ff1cef1e63631b8f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2020/09/01 3:55 p.m.•46 views

GHSA-FWCW-5QW2-87MP fuelux vulnerable to Cross-Site Scripting in Pillbox feature

Affected versions of fuelux contain a cross-site scripting vulnerability in the Pillbox feature. By supplying a script as a value for a new pillbox, it is possible to cause arbitrary script execution. Recommendation Update to version 3.15.7 or later...

6.1AI score0.00565EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2020/09/01 3:55 p.m.•36 views

fuelux vulnerable to Cross-Site Scripting in Pillbox feature

Affected versions of fuelux contain a cross-site scripting vulnerability in the Pillbox feature. By supplying a script as a value for a new pillbox, it is possible to cause arbitrary script execution. Recommendation Update to version 3.15.7 or later...

4.2AI score0.00565EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/01 12:00 a.m.•6 views

PT-2020-7941

Name of the Vulnerable Software and Affected Versions: fuelux versions prior to 3.15.7 Description: The issue concerns a cross-site scripting vulnerability in the Pillbox feature of the affected software. This vulnerability can be exploited by supplying a script as a value for a new pillbox,...

0.00565EPSS
SaveExploits0References6
nodejs
nodejs
•added 2016/07/25 4:43 p.m.•33 views

Cross-Site Scripting

Overview Affected versions of fuelux contain a cross-site scripting vulnerability in the Pillbox feature. By supplying a script as a value for a new pillbox, it is possible to cause arbitrary script execution. Recommendation Update to version 3.15.7 or later. References - Issue 1841 - PR 1856 -...

4.9AI score0.00565EPSS
SaveExploits0Affected Software1
hackapp
hackapp
•added 2016/04/01 9:12 a.m.•20 views

My PillBox(Meds&Pill Reminder) - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application My PillBoxMeds&Pill Reminder published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder