FORT Validator security vulnerability

FORT Validator is a NICMx open source RPKI dependency and RTR server. A security vulnerability exists in FORT Validator version 1.6.4 and earlier, which stems from a validation integrity issue that could lead to incomplete routing origin validation data...

com.github.a-pz:struts2-thymeleaf3-plugin (1.2.0-release), io.ultreia.java4all.jaxx:jaxx-compiler (>=3.0-alpha-35, <=3.0-alpha-40) +75 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.17)

org.apache.struts:struts2-core MAVEN version 2.5.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.github.a-pz:struts2-thymeleaf3-plugin 1.2.0-release - io.ultreia.java4all.jaxx:jaxx-compiler...

NICMx Fort Buffer Overflow

The vulnerability of the NICMx Fort validator is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

eu.europa.ec.joinup.sd-dss:dss-cookbook (>=6.0, <=6.2.rc1), eu.europa.ec.joinup.sd-dss:dss-jacoco-coverage (>=6.0, <=6.2.rc1) +13 more potentially affected by CVE-2024-52800 via org.verapdf:core-jakarta (>=1.24.1, <=1.26.1)

org.verapdf:core-jakarta MAVEN version =1.24.1, =6.0, =6.0, =6.0, =0.5.0, =0.6.0, =6.0.d4j.1, =6.0.d4j.1, =6.0.d4j.1, =2.12.0, =3.2.0, =3.2.0, =1.24.1, =1.24.1, =1.24.1, =1.26.1 - org.verapdf:wcag-validation-jakarta 1.26.1 Source cves: CVE-2024-52800 Source advisory: GHSA-4CX5-89VM-833X...

Malware in module-json-validator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in dep-validator-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af93a927101a23e38ce34664c1c85dc8651f0e3a5a066ec9a110caabe4cadcbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10960 Malicious code in dep-validator-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af93a927101a23e38ce34664c1c85dc8651f0e3a5a066ec9a110caabe4cadcbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in dep-validator-cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-11463

The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'from', 'to', and 'key' parameters in all versions up to, and including, 5.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

CVE-2024-11463

CVE-2024-11463 affects the DeBounce Email Validator WordPress plugin (all versions up to 5.6.5). It enables Reflected Cross-Site Scripting via from, to, and key parameters, allowing unauthenticated attackers to inject scripts in pages/actions triggered by user interaction. The vulnerability is do...

CVE-2024-11463 DeBounce Email Validator <= 5.6.5 - Reflected Cross-Site Scripting

The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'from', 'to', and 'key' parameters in all versions up to, and including, 5.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

CVE-2024-11463 DeBounce Email Validator <= 5.6.5 - Reflected Cross-Site Scripting

The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'from', 'to', and 'key' parameters in all versions up to, and including, 5.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

CVE-2024-11463: Improper Neutralization of Input During Web Page Generation

The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'from', 'to', and 'key' parameters in all versions up to, and including, 5.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

WordPress plugin DeBounce Email Validator: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

HTML Injection

org.hibernate.validator, hibernate-validator is vulnerable to HTML Injection. The vulnerability is due to improper validation in the 'isValid' method of the SafeHtmlValidator class, where the tag ending can be omitted by using a less-than character, allowing invalid HTML to be rendered...

PT-2024-17015 · WordPress · Debounce Email Validator

Name of the Vulnerable Software and Affected Versions: DeBounce Email Validator plugin for WordPress versions up to, and including, 5.6.5 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated...

WordPress DeBounce Email Validator plugin <= 5.6.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian in WordPress Plugin DeBounce Email Validator versions = 5.6.5...

MAL-2024-10761 Malicious code in module-json-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f9de22e9d105a1442fd2bab315de0e956fcabbec66fbfa38d5e3452a01bc33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in module-json-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f9de22e9d105a1442fd2bab315de0e956fcabbec66fbfa38d5e3452a01bc33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ai.minxiao:ds4s-cdl4j_2.11 (>=0.1.0, <=0.1.2), be.fluid-it.microservice.bundle:microservice-bundle-core (>=0.1-1, <=0.1-5) +1212 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.1.3.final)

org.hibernate:hibernate-validator MAVEN version 5.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - ai.minxiao:ds4s-cdl4j2.11 =0.1.0, =0.1-1, =0.1-1, =0.8-1-1, =0.0.105, =0.0.6, =0.0.5,...