CVE-2024-49240

CVE-2024-49240 describes a reflected Cross-Site Scripting vulnerability in the WordPress plugin AB Categories Search Widget (versions

CVE-2024-49240 WordPress AB Categories Search Widget plugin <= 0.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ajberasategui AB Categories Search Widget ab-categories-search-widget allows Reflected XSS.This issue affects AB Categories Search Widget : from n/a through = 0.2.5...

WordPress AB Categories Search Widget plugin <= 0.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin AB Categories Search Widget versions = 0.2.5...

WordPress AB Categories Search Widget Plugin <= 0.2.5 is vulnerable to Cross Site Scripting (XSS)

Software AB Categories Search Widget Type Plugin Vulnerable versions = 0.2.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49240 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 21eeb86e4dc6 Credits Le Ngoc Anh Required...

Malicious code in @diotoborg/ab-harum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ccca0ae3c058c2906f4f04204180002b10f092386a198068224dda6a95c888a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/eum-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d0dde9883b162ed231dd672195b9d29946e7a84bc34e8bb8346f6415a1ac0f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/cum-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bfe0f8355c0f6cc419f814cdc95b5b9800f63e6dd4874fe8633eee4a81dcd1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8684 Malicious code in @diotoborg/vero-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fb2e8e4a6349f91a258ae73ba115417262626ce8cbaea20f02605963832fa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/molestias-ab-rem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b27e9f1b9a470c4d3602228bf019eed81a341fa5f7d59c60c35e547fe0d8238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8433 Malicious code in @diotoborg/molestias-ab-rem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b27e9f1b9a470c4d3602228bf019eed81a341fa5f7d59c60c35e547fe0d8238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/ab-facere (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c6e41bf971342b9e0009cc5ffb3ff11bfdb96ecf12030234a6d1380644ddac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ewon Cosy+ Hardcoded Key

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-032 Product: Ewon Cosy+ Manufacturer: HMS Industrial Networks AB Affected Versions: Firmware Versions: 21.2s10 and 22.1s3 Tested Versions: Firmware Version: 21.2s7 Vulnerability Type: Use of Hard-coded Cryptographic Key CWE-32...

Ewon Cosy+ Improper Neutralization / Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-016 Product: Ewon Cosy+ Manufacturer: HMS Industrial Networks AB Affected Versions: Firmware Versions: 21.2s10 and 22.1s3 Tested Versions: Firmware Version: 21.2s7 Vulnerability Type: Improper Neutralization of Input During We...

CVE-2024-42274

CVE-2024-42274 affects the Linux kernel’s ALSA firewire-lib. Reverting commit 7ba5ca32fe6e caused by removing the process-context workqueue from amdtp_domain_stream_pcm_pointer() and update_pcm_pointers() introduced AB/BA deadlock competition for the substream lock, potentially freezing systems u...

CVE-2024-37382

Affected products: Ab Initio Metadata Hub and Ab Initio Authorization Gateway, prior to version 4.3.1.1. Root cause: in the import host feature, crafted server configuration changes allow remote code execution. Impact: arbitrary code execution with high confidentiality, integrity, and availabilit...

PT-2024-27511 · Ab Initio · Ab Initio Authorization Gateway +1

Name of the Vulnerable Software and Affected Versions: Ab Initio Metadata Hub and Authorization Gateway versions prior to 4.3.1.1 Description: An issue in the import host feature allows attackers to run arbitrary code via crafted modification of server configuration. Recommendations: For versions...

CVE-2024-37382

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration...

Ab Initio Metadata Hub和Ab Initio Authorization Gateway 安全漏洞

Ab Initio Metadata Hub and Ab Initio Authorization Gateway are both products of Ab Initio, Inc. of the U.S. Ab Initio Metadata Hub is a metadata system.Ab Initio Authorization Gateway is an authorization gateway. A security vulnerability exists in Ab Initio Metadata Hub and Ab Initio Authorizatio...

MAL-2024-7243 Malicious code in @zitterorg/itaque-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 217d8db03885fbfc16379716c8fca9f21d84d523ae2d286a665e4b804be53883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/itaque-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 217d8db03885fbfc16379716c8fca9f21d84d523ae2d286a665e4b804be53883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...