552 matches found
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the /siteVar/save.do endpoint. An attacker can inject and execute arbitrary scripts by submitting crafted input to the Remark or Variable Value parameters. Details Cross-site scripting or XSS is a code...
CVE-2025-15416
CVE-2025-15416 affects xnx3 wangmarket up to 6.4. The vulnerability exists in the file /siteVar/save.do within the Add Global Variable Handler. Manipulating the Remark/Variable Value parameter can trigger a cross-site scripting (XSS) flaw that can be exploited remotely; the exploit has been publi...
CVE-2025-15416 xnx3 wangmarket Add Global Variable save.do cross site scripting
A vulnerability was found in xnx3 wangmarket up to 6.4. This affects an unknown function of the file /siteVar/save.do of the component Add Global Variable Handler. The manipulation of the argument Remark/Variable Value results in cross site scripting. The attack can be executed remotely. The...
CVE-2025-15416: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in xnx3 wangmarket up to 6.4. This affects an unknown function of the file /siteVar/save.do of the component Add Global Variable Handler. The manipulation of the argument Remark/Variable Value results in cross site scripting. The attack can be executed remotely. The...
wangmarket 代码注入漏洞
wangmarket is a privatized deploy your own SAAS cloud builder system for xnx3 individual developers in China. A code injection vulnerability exists in wangmarket 6.4 and earlier versions, which stems from the incorrect operation of the parameter Remark/Variable Value in the file /siteVar/save.do,...
CVE-2025-15092
A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/ConfigExceptMSN. Such manipulation of the argument remark leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be us...
CVE-2025-15092 UTT 进取 512W ConfigExceptMSN strcpy buffer overflow
A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/ConfigExceptMSN. Such manipulation of the argument remark leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be us...
CVE-2025-15092 UTT 进取 512W ConfigExceptMSN strcpy buffer overflow
A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/ConfigExceptMSN. Such manipulation of the argument remark leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be us...
PT-2025-53410
Name of the Vulnerable Software and Affected Versions UTT 进取 512W versions through 1.7.7-171114 Description A flaw exists in UTT 进取 512W that allows for remote buffer overflow. The issue is related to the strcpy function within the /goform/ConfigExceptMSN file. Manipulation of the remark argument...
Malicious Package
Overview remark-mdx2.3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview remark-stringify10 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview remark-parse10 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in remark-stringify10 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070b9c61c5afbb3ccd2147952cb2a3a1d18df77bb32d81aea039243c89a20b05 The package remark-stringify10 was found to contain malicious code. Source: ghsa-malware...
MAL-2025-192253 Malicious code in remark-stringify10 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070b9c61c5afbb3ccd2147952cb2a3a1d18df77bb32d81aea039243c89a20b05 The package remark-stringify10 was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-201046
Malicious code in remark-stringify10 npm...
MAL-2025-192246 Malicious code in remark-parse10 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd5885ca66abe264124578aa99aaeb2907923a26681d5b64e8d6b72cb72696 The package remark-parse10 was found to contain malicious code. Source: ghsa-malware b0d37276c9efb7e85e07384bd19c0625e6672c70443710e145c260516f0ba2f4...
Malicious code in remark-parse10 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd5885ca66abe264124578aa99aaeb2907923a26681d5b64e8d6b72cb72696 The package remark-parse10 was found to contain malicious code. Source: ghsa-malware b0d37276c9efb7e85e07384bd19c0625e6672c70443710e145c260516f0ba2f4...
EUVD-2025-201031
Malicious code in remark-parse10 npm...
Malicious code in remark-mdx2.3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c1aeb4bf17c6bd9bf6da5eba8cdf8e16eeaf94b61d338b3e950e62f1210431 The package remark-mdx2.3 was found to contain malicious code. Source: ghsa-malware babcb3ddc3e2ab51e2cf525967b1102abbf264c81ccfbf13d9d8a2a66d8bbfc4...