Malicious code in o-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fddcdd51b3f457d1b6c813c74ebafd8917c5ba226abce1761036485a0d97ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af9fdc15851003f5e9ecaa97557cd6de3bc7ca2906aeebd1924ea59dccacbca2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3304 Malicious code in gd-display-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbb8205ec8f605359044821f392ba666298383cd89c39606a537468b8090c978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-display-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbb8205ec8f605359044821f392ba666298383cd89c39606a537468b8090c978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31301

Haraj v3.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the Post Ads component...

CVE-2022-31301

Haraj v3.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the Post Ads component...

CVE-2022-31301

Haraj v3.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the Post Ads component...

CVE-2022-31298

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2022-31298

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2022-31298

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

Cross site scripting

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2022-31301

Haraj v3.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the Post Ads component...

CVE-2022-31301

Haraj v3.7 contains a stored XSS vulnerability in the Post Ads component. The CVE-2022-31301 entry aligns with multiple sources (NVD, Red Hat, CNVD, CNNVD, CVE.org) describing a stored XSS in Haraj’s Post Ads. An exploit exists on GitHub (Exploit for Cross-site Scripting in Angtech Haraj) detaili...

CVE-2022-31298

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

Haraj 跨站脚本漏洞

A cross-site scripting vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia. The vulnerability stems from a stored cross-site scripting XSS vulnerability contained in the Post Ads component. An attacker could exploit this vulnerability to conduct cross-site...

CVE-2022-21938

CVE-2022-21938 concerns cross-site scripting in Johnson Controls Metasys ADS/ADX/OAS Servers (MUI Graphics web interface). Affected: Metasys ADS/ADX/OAS 10.x before 10.1.5 and 11.x before 11.0.2, due to improper neutralization of input during web page generation (MUI Graphics). Impact per sources...

Code injection

Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the web interface...

CVE-2022-21935

CVE-2022-21935 affects Johnson Controls Metasys ADS/ADX/OAS Servers version 10 prior to 10.1.5 and version 11 prior to 11.0.2, with an unverified password change vulnerability (CWE-620). The NVD/NIST entry assigns CVSSv3.1 base score 7.5 (HIGH) and CVSSv2 base 7.5, both indicating high impact on ...

CVE-2022-21937

CVE-2022-21937 affects Johnson Controls Metasys ADS/ADX/OAS Servers (versions 10 prior to 10.1.5 and 11 prior to 11.0.2). The issue is an improper neutralization of input during web page generation (cross-site scripting), enabling injection and storage of malicious code into the web interface. Th...

Cross site request forgery (csrf)

The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form...