3418 matches found
MAL-2022-3712 Malicious code in hub-rss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e2c3f2d68e315b2b7c48efbdcacbf670e5763f027831953c2d37200b8f2d9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hub-rss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e2c3f2d68e315b2b7c48efbdcacbf670e5763f027831953c2d37200b8f2d9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-C33V-23RX-7QQC Magento 2 Community Edition IDOR Vulnerability
An insecure direct object reference IDOR vulnerability exists in the RSS feeds of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can lead to unauthorized access to order details...
Magento 2 Community Edition IDOR Vulnerability
An insecure direct object reference IDOR vulnerability exists in the RSS feeds of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can lead to unauthorized access to order details...
Fedora: Security Advisory for php-openpsa-universalfeedcreator (FEDORA-2022-a66124e04f)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for php-openpsa-universalfeedcreator (FEDORA-2022-59f0ad964c)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: php-openpsa-universalfeedcreator-1.8.4.1-1.fc35
RSS and Atom feed generator. Supported formats: RSS0.91, RSS1.0, RSS2.0, PIE0.1 deprecated, MBOX, OPML, ATOM, ATOM0.3, HTML, JS, PHP. Autoloader: /usr/share/php/openpsa-universalfeedcreator/autoload.php...
[SECURITY] Fedora 36 Update: php-openpsa-universalfeedcreator-1.8.4.1-1.fc36
RSS and Atom feed generator. Supported formats: RSS0.91, RSS1.0, RSS2.0, PIE0.1 deprecated, MBOX, OPML, ATOM, ATOM0.3, HTML, JS, PHP. Autoloader: /usr/share/php/openpsa-universalfeedcreator/autoload.php...
[SECURITY] Fedora 34 Update: php-openpsa-universalfeedcreator-1.8.4.1-1.fc34
RSS and Atom feed generator. Supported formats: RSS0.91, RSS1.0, RSS2.0, PIE0.1 deprecated, MBOX, OPML, ATOM, ATOM0.3, HTML, JS, PHP. Autoloader: /usr/share/php/openpsa-universalfeedcreator/autoload.php...
MoinMoin Cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin before 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...
Plone denial of service via RSS Feed Request
pythonscripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service infinite loop via an RSS feed request for a folder the user does not have permission to access...
GHSA-79HJ-474H-V4XV Plone denial of service via RSS Feed Request
pythonscripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service infinite loop via an RSS feed request for a folder the user does not have permission to access...
au.com.permeance:liferay-clojure-integration (=0.1), com.liferay.maven.plugins:liferay-maven-plugin (>=6.0.2 <=6.0.6) +6 more potentially affected by CVE-2010-5327 via com.liferay.portal:portal-impl (>=5.2.3 <=6.2.1)
com.liferay.portal:portal-impl MAVEN version =5.2.3, =6.0.2, =6.1.2, =5.2.3, =2.4, =1.0, =2.0, =2.5 Source cves: CVE-2010-5327 Source advisory: OSV:GHSA-97GM-MCV6-CPHM...
GHSA-VJXX-54VW-Q59F Moodle SSRF Vulnerability
The editblog.php script allows a registered user to add external RSS feed resources. It was identified that this feature could be abused to be used as a SSRF attack vector by adding a malicious URL/TCP PORT in order to target internal network or an internet hosted server, bypassing firewall rules...
Moodle SSRF Vulnerability
The editblog.php script allows a registered user to add external RSS feed resources. It was identified that this feature could be abused to be used as a SSRF attack vector by adding a malicious URL/TCP PORT in order to target internal network or an internet hosted server, bypassing firewall rules...
Moodle vulnerable to Cross-Site Request Forgery
Cross-site request forgery CSRF vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block...
MediaWiki Cross-Site Scripting Vulnerability (CNVD-2022-68822)
MediaWiki is a web-based wiki engine from the MediaWiki Foundation in the United States. The product can be used to deploy internal knowledge management and content management systems.A cross-site scripting vulnerability exists in versions of MediaWiki prior to 2022-04-29, which stems from an RSS...
CVE-2022-29969
A flaw was found in the RSS extension of MediaWiki. This flaw allows a remote attacker to cause a Cross-site scripting XSS attack if the feed is in $wgRSSUrlWhitelist and the $wgRSSAllowLinkTag is true...
