3797 matches found
MAL-2022-5491 Malicious code in proton-super-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a91667df730f49d5f2c35a384f5c407afef6f317c05544309d59b7d30ea0062 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in super-rentals (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f57cbebd0ed14d81fa21527f8f5dd76307b98d291d59d0c3ca5c9b64c6cf6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6351 Malicious code in super-rentals (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f57cbebd0ed14d81fa21527f8f5dd76307b98d291d59d0c3ca5c9b64c6cf6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in super-streams (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9e875ac4f4d2ba4b87d745da6afa57744f7c01de2c5dbb54f5aa61e28dfce08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6352 Malicious code in super-streams (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9e875ac4f4d2ba4b87d745da6afa57744f7c01de2c5dbb54f5aa61e28dfce08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress Google Places Reviews plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
NocoDB 跨站脚本漏洞
NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite, and MariaDb into a smart spreadsheet.A cross-site scripting vulnerability exists in versions of NocoDB prior to 0.91.7, which stems from a lack of data validation filtering of user-supplied data and...
CVE-2022-1772
The Google Places Reviews WordPress plugin before 2.0.0 does not properly escape its Google API key setting, which is reflected on the site's administration panel. A malicious administrator could abuse this bug, in a multisite WordPress configuration, to trick super-administrators into viewing th...
CVE-2022-1772 Google Places Review < 2.0.0 - Admin+ Stored Cross Site Scripting
The Google Places Reviews WordPress plugin before 2.0.0 does not properly escape its Google API key setting, which is reflected on the site's administration panel. A malicious administrator could abuse this bug, in a multisite WordPress configuration, to trick super-administrators into viewing th...
Stored Cross-Site Scripting
Description A stored cross-site scripting vulnerability exists within the Gallery View comments functionality. Replication Steps and PoC Preconditions PC1. A project exists. PC2. A table with a sheet containing data exists in the project. PC3. A gallery view exists. PC4. A user with the editor ro...
super-jam.com Cross Site Scripting vulnerability OBB-2627285
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-42659: Improper Restriction of Operations within the Bounds of a Memory Buffer
There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...
PT-2025-8343
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel's ext4 file system has been identified, which can cause a system panic due to an incorrect check for overlapping extents. The issue occurs when the ext4 valid...
CVE-2021-25267
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA...
CVE-2021-25267
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA...
CVE-2021-25267: Improper Neutralization of Input During Web Page Generation
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA...
Sophos Firewall 跨站脚本漏洞
Sophos Firewall is a firewall from Sophos UK. A security vulnerability exists in Sophos Firewall versions prior to 19.0 GA that allows an attacker to escalate privileges from Administrator to Super Administrator in Webadmin of Sophos Firewall...
India’s New Super App Has a Privacy Problem
Tata Neu is the country’s latest do-everything app. When users signed up, their personal information was already there...
Shopizer 安全特征问题漏洞
Shopizer is a Java-based open source e-commerce solution from the Shopizer team. A security signature issue vulnerability exists in Shopizer versions 2.0 through 2.17.0, which can be exploited by an attacker to cause a regular administrator to permanently delete a super administrator...
