CoinRemitter Plugin For Opencart 注入漏洞

CoinRemitter Plugin For Opencart is an OpenCart plugin from the individual developers at Coinremitter. An injection vulnerability exists in CoinRemitter Plugin For Opencart version 0.0.1 and 0.0.2, which stems from an incorrect manipulation of the parameter coin that can lead to sql injection...

CVE-2025-23685 WordPress RomanCart On WordPress plugin <= 0.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebTechGlobal RomanCart romancart-on-wordpress allows Reflected XSS.This issue affects RomanCart: from n/a through = 0.0.2...

WordPress plugin Exhibit to WP Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-17436 · WordPress · Exhibit To Wp Gallery

Name of the Vulnerable Software and Affected Versions: Exhibit to WP Gallery WordPress plugin version 0.0.2 Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the page. This could be...

Malicious code in weekendfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a849edc917944121cfccfa291e1d3004f70217db057208193c6d912d4064126d The OpenSSF Package Analysis project identified 'weekendfe' @ 0.0.2 npm as malicious. It is considered malicious because: - The package executes...

Malicious code in spot-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5266209798ebafe67e3827752a8025acd7d54406e99400930929aee0c6b8e862 The OpenSSF Package Analysis project identified 'spot-admin' @ 0.0.2 npm as malicious. It is considered malicious because: - The package execute...

MAL-2024-11776 Malicious code in spot-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5266209798ebafe67e3827752a8025acd7d54406e99400930929aee0c6b8e862 The OpenSSF Package Analysis project identified 'spot-admin' @ 0.0.2 npm as malicious. It is considered malicious because: - The package execute...

Malicious code in keycloak-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3df989aa26dccceca3917c9b3454427df4f54e9c104fbc080e913d30af3e66b2 The OpenSSF Package Analysis project identified 'keycloak-server' @ 0.0.2 npm as malicious. It is considered malicious because: - The package...

WordPress plugin Elemenda 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Malicious code in iufgbewroibgfowiebc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 06029514a813cf9b228f1be7c997bffc2510869a5f0130d6036fa63ee6ea2fbc According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

Swiper Security Vulnerabilities

Swiper is a free mobile touch slider by Vladimir Kharlampidi personal developer. It is intended for use in mobile websites, mobile web applications and mobile native applications. A security vulnerability exists in Swiper version v0.0.2, which stems from the inclusion of prototype contamination v...

Collabora Online 安全漏洞

Collabora Online is an application from Collabora UK. A powerful LibreOffice-based online office that supports all major document, spreadsheet and presentation file formats. A security vulnerability exists in Collabora Online version 0.0.2 and later, which stems from the presence of a local file...

Malicious code in alok-test123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e08174da02aedc0309b86a446a477048c0e3a557116dcfe7850b2c0038fcb3c2 The OpenSSF Package Analysis project identified 'alok-test123' @ 0.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in plugin-getting-started (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b95fa1847620d5c168b65bdb2d2753b26090a68b3c1f7846edd359a80d3e34f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xmlbuilder3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5ccc40a08ace658e1c2bb67a692e4a04f1c6c826a6cfbf7c2bec41d0f54c540 The OpenSSF Package Analysis project identified 'xmlbuilder3' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...

Malicious code in notsogood (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b089f6e53ae82855fbdcf8b69573b5835bdc0ca9a476056a3fb78f1e85c2a50c The OpenSSF Package Analysis project identified 'notsogood' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...

PT-2023-7362 · Docker · Play With Docker

Name of the Vulnerable Software and Affected Versions: Play With Docker versions prior to 0.0.2 Description: The issue is related to an insecure CAP SYS ADMIN privileged mode in Play With Docker, which is associated with inadequate access control. This can be exploited by a remote attacker to...

SUSE CVE-2023-33199

Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed entry of the intoto/v0.0.2 type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error...

Play With Docker 安全漏洞

Play With Docker is an easy, interactive and fun training ground for learning Docker. A security vulnerability exists in Play With Docker version 0.0.2 and prior versions that stems from incorrect CORS configuration...

CVE-2022-3489

The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the customwpadminslug settings, allowing unauthenticated attackers to update it with a crafted request...