207 matches found
MAL-2024-9148 Malicious code in get-new-script-rainbow-six-unlock-all-skins-elite-and-various-other-updated-2023-q6uukf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db8c54f4bb9ad19f21f98ee87293ddfa45b05b6953115df873afd3b5092c1b9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-31987 XWiki Platform remote code execution from account via custom skins support
XWiki Platform is a generic wiki platform. Starting in version 6.4-milestone-1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, any user who can edit any page like their profile can create a custom skin with a template override that is executed with programming right, thus allowing remote...
CVE-2024-31987 XWiki Platform remote code execution from account via custom skins support
XWiki Platform is a generic wiki platform. Starting in version 6.4-milestone-1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, any user who can edit any page like their profile can create a custom skin with a template override that is executed with programming right, thus allowing remote...
XWiki Platform remote code execution from account via custom skins support
Impact Any user who can edit any page like their profile can create a custom skin with a template override that is executed with programming right, thus allowing remote code execution. To reproduce, as a user without edit, script or admin right, add an object of class XWiki.XWikiSkins to your...
GHSA-CV55-V6RW-7R5V XWiki Platform remote code execution from account via custom skins support
Impact Any user who can edit any page like their profile can create a custom skin with a template override that is executed with programming right, thus allowing remote code execution. To reproduce, as a user without edit, script or admin right, add an object of class XWiki.XWikiSkins to your...
PT-2024-24337 · Unknown · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 6.4-milestone-1 through 4.10.18 XWiki Platform versions prior to 15.5.4 XWiki Platform versions prior to 15.10-rc-1 Description: The XWiki Platform is affected by a remote code execution issue. This issue arises from t...
CVE-2023-37976
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Radio Forge Muses Player with Skins plugin = 2.5 versions...
CVE-2023-37976 WordPress Radio Forge Muses Player with Skins Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Radio Forge Muses Player with Skins plugin = 2.5 versions...
CVE-2023-37976
CVE-2023-37976: Unauthenticated Reflected Cross-Site Scripting in WordPress Radio Forge Muses Player with Skins plugin (versions <= 2.5). The connected sources confirm the vulnerability is XSS with unauthenticated exposure and no publicly documented fix/version yet. Wordfence entries list the ...
WordPress Plugin Radio Forge Muses Player with Skins 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2023-37976: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Radio Forge Muses Player with Skins plugin = 2.5 versions...
PT-2023-26223
Name of the Vulnerable Software and Affected Versions Radio Forge Muses Player with Skins plugin versions = 2.5 Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website...
The vulnerability of the XWikiSkins class in the XWiki Platform, a platform for creating collaborative web applications, allows attackers to gain access to read, modify, or delete data.
The vulnerability of the SkinsCode.XWikiSkinsSheet method implemented in the XWikiSkins class of the XWiki Platform for creating collaborative web applications is related to the failure to neutralize instructions in the dynamically executed code when processing documents from the /SkinsCode...
WordPress Contact Form 7 Skins Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)
Software Contact Form 7 Skins Type Plugin Vulnerable versions = 2.1 Fixed in 2.1.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 6924d48f2e2e Credits Rafie Muhammad Patchstack Require...
[SECURITY] Fedora 38 Update: qmmp-2.1.2-4.fc38
This program is an audio-player, written with help of Qt library. The user interface is similar to winamp or xmms. Main opportunities: Winamp and xmms skins support plugins support MPEG1 layer 2/3 support Ogg Vorbis support native FLAC support WavePack support ModPlug support PCM WAVE support CD...
Fedora: Security Advisory for qmmp (FEDORA-2023-a5e10b188a)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE CVE-2018-14056
ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories...
Malicious code in free-fortnite-skins-genrator-en5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff40e477d49011b4a34505bbf334026e1a1818be6542a4745b5b102e88370e8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in free-fortnite-skins-genrator-en4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 664c07b1a7fedffc1a5198ed78abc28a06c20dad03c2d7a187339d6f71f7185f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3164 Malicious code in free-fortnite-skins-genrator-en5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff40e477d49011b4a34505bbf334026e1a1818be6542a4745b5b102e88370e8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...