Lucene search
+L

10 matches found

Github Security Blog
Github Security Blog
•added 2024/10/28 5:51 a.m.•5 views

Malware in videoads-util-misc-general

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2024/10/28 5:51 a.m.•18 views

MAL-2024-10255 Malicious code in videoads-util-misc-general (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e09df3f56783004e4936e57f3a6dac4e757c0d2d3cb2c0acf10bf15c6f4435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/28 5:51 a.m.•12 views

Malicious code in videoads-util-misc-general (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e09df3f56783004e4936e57f3a6dac4e757c0d2d3cb2c0acf10bf15c6f4435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/09/05 1:16 a.m.•6 views

Malicious code in videoads-util-capability-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c35439ff6a52f61168d44df9518ac3ee4b0165f2e3e6b8e748d90d105e1c3d27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/09/05 1:16 a.m.•5 views

Malware in videoads-util-capability-detection

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2024/09/05 1:16 a.m.•9 views

MAL-2024-8828 Malicious code in videoads-util-capability-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c35439ff6a52f61168d44df9518ac3ee4b0165f2e3e6b8e748d90d105e1c3d27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2015/10/14 7:00 p.m.•40 views

CVE-2015-7370

Multiple cross-site scripting XSS vulnerabilities in open-flash-chart.swf in Open Flash Chart 2, as used in the VideoAds plugin in Revive Adserver before 3.2.2 and CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and...

5.8AI score0.02239EPSS
SaveExploits1References7
CVE
CVE
•added 2015/10/14 7:00 p.m.•74 views

CVE-2015-7370

The CVE-2015-7370 entry applies to Revive Adserver’s VideoAds component using Open Flash Chart 2, where open-flash-chart.swf is vulnerable to reflected XSS via id and data-file parameters. Affects Revive Adserver up to 3.2.1 (and related CA/OpenX integrations) with the VideoAds plugin; CVSS v2 ba...

4.3CVSS5.9AI score0.02239EPSS
SaveExploits1References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/10/14 12:00 a.m.•8 views

CVE-2015-7370: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in open-flash-chart.swf in Open Flash Chart 2, as used in the VideoAds plugin in Revive Adserver before 3.2.2 and CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and...

4.3CVSS5.9AI score0.02239EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/11/26 12:00 a.m.•6 views

CVE-2014-9098: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to 1...

3.5CVSS5.9AI score0.02875EPSS
SaveExploits2References2
Rows per page
Query Builder