Malicious code in prompt-toolkiit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d580c098686d198715824a4368bd2e02c21d8d4d659d87888070e4cc8c662c9a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1970 Malicious code in prmpt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fa02975d3c00d07e7e2da0697ef9397316f78ed49bcba987a14c1974ad9de35b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in promtp-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7109d3f59807180ae0d2a0c29a60a87e8db5ca9ce59d7285827149f4e48047fe Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2011 Malicious code in promtp-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7109d3f59807180ae0d2a0c29a60a87e8db5ca9ce59d7285827149f4e48047fe Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pprompt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 688eec852f4ae2ab7b9b359f6355fc88e772deae37da361a71acdc859750ccf3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in promt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 48a3aae8348ff44ffc4dcd27bfff57d923166e5c9963273bc5960c6da7fe92b8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in promppt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f9bd3ec518a299fe238ca7c15130e57f19531aa592d03cb2112adc08df02226d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1991 Malicious code in prommpt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 311cb8997482e18c4ebcc1ec7e371d321d8498ae6018076c67d969021c43bd81 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prommpt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 311cb8997482e18c4ebcc1ec7e371d321d8498ae6018076c67d969021c43bd81 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pompt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1261c75a8d1e3798424e001e837db3aa3146f10d5c703718cc3d3237ea5b4024 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in rquests-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c51be2a24f650a0b1d3d6d85b08b9106249116f61e0f6c611c94d20f36e1797d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.7 security and bug fix update

The Migration Toolkit for Containers MTC 1.7.7 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

FreeBSD : node_exporter -- bypass security with cache poisoning (d835c54f-a4bd-11ed-b6af-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d835c54f-a4bd-11ed-b6af-b42e991fc52e advisory. - Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8....

CVE-2022-4835

The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2022-4835

The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

Cross site scripting

The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2022-4835 Social Sharing Toolkit <= 2.6 - Contributor+ Stored XSS via Shortcode

The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

WordPress plugin Social Sharing Toolkit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CISA releases advice on how to safeguard K–12 organizations

To help K-12 schools and school districts in their struggle against cybercrime the Cybersecurity & Infrastructure Security Agency CISA has released the report, Protecting Our Future: Partnering to Safeguard K-12 organizations from Cybersecurity Threats. A cybersecurity incident can significantly...

Mozilla: Arbitrary file read from GTK drag and drop on Linux

The Mozilla Foundation Security Advisory describes this flaw as: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData...