946 matches found
CVE-2022-32274
The Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation function...
CVE-2022-32274
The Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation function...
CVE-2022-32274
The Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation function...
Cross site scripting
The Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation function...
CVE-2022-32274
The CVE-2022-32274 entry concerns the Transition Scheduler add-on 6.5.0 for Atlassian Jira, with a stored XSS vulnerability that can be triggered via the project name during the creation function. The issue is documented across multiple sources (e.g., NVD description). Reported impact indicates p...
CVE-2022-32274
The Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation function...
Atlassian Jira 跨站脚本漏洞
Atlassian Jira is a defect tracking management system from Atlassian Australia. The Atlassian Jira Transition Scheduler plugin version 6.5.0 contains a cross-site scripting vulnerability, which stems from the fact that it is easy to store XSS to the creation function via the project name. An...
CVE-2022-32274: Improper Neutralization of Input During Web Page Generation
The Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation function...
PT-2022-21199
Name of the Vulnerable Software and Affected Versions Atlassian Jira Transition Scheduler add-on version 6.5.0 Description The issue concerns a stored XSS vulnerability via the project name to the creation function. This allows for potential malicious script execution when a user interacts with a...
Get to Know Fred House
Meet Fred House Senior Director, Product Detection and Research By Michael Alicea · July 12, 2022 At Trellix, we celebrate and champion our people. For a long time now, I’ve been looking forward to connecting with Fred House, a Senior Director at Trellix Threat Labs and a consummate and “driven”...
NIST Announces First Four Quantum-Resistant Cryptographic Algorithms
The U.S. Department of Commerce's National Institute of Standards and Technology NIST has chosen the first set of quantum-resistant encryption algorithms that are designed to "withstand the assault of a future quantum computer." The post-quantum cryptography PQC technologies include the...
Prepare for a New Cryptographic Standard to Protect Against Future Quantum-Based Threats
The National Institute of Standards and Technology NIST has announced that a new post-quantum cryptographic standard will replace current public-key cryptography, which is vulnerable to quantum-based attacks. Note: the term “post-quantum cryptography” is often referred to as “quantum-resistant...
[SECURITY] [DLA 3067-1] Debian 9 Long Term Support reaching end-of-life
------------------------------------------------------------------------- Debian LTS Advisory DLA-3067-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 01, 2022 https://wiki.debian.org/LTS -...
PT-2022-31421
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a warning in the dev wake function within mhi pm disable transition. The actual impact and potential for attack have not been proven. Recommendations For Linux Kernel...
PT-2022-31109
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a warning in the dev wake function within mhi pm disable transition. The actual impact and potential for attack have not been proven. Recommendations For Linux Kernel...
You only have nine months to ditch Exchange Server 2013
Microsoft has posted a reminder that Exchange Server 2013 reaches End of Support EoS on April 11, 2023. Thats a little more than 9 months from now. A useful and timely reminder, since we all realize that it takes some time to migrate to a different system. Every Windows product has a lifecycle. T...
WordPress Simple Page Transition 1.4.1 Cross Site Scripting Vulnerability
Exploit Title: WordPress Plugin ‘Simple Page Transition’ - Stored Cross Site Scripting Exploit Author: Mariam Tariq - HunterSherlock Vendor Homepage: https://wordpress.org/plugins/simple-page-transition/ Version: 1.4.1 Tested on: Firefox Contact me: email protected Vulnerable code: " / POC: 1-...
Simple Page Transition <= 1.4.1 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup Put the following payload in the "Ignored Download Link...
Malicious code in @harrysforge/transition (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a58e982d5cc126597c6cdebe4fde72b00d13bcffcea1f5c43096cd2235629b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-328 Malicious code in @harrysforge/transition (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a58e982d5cc126597c6cdebe4fde72b00d13bcffcea1f5c43096cd2235629b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...