PT-2025-42673

Name of the Vulnerable Software and Affected Versions ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress versions through 6.3.4 Description The plugin has a flaw that allows unauthorized modification of data. A missing capability check on the shortpixel...

Malicious code in sap-ajaxrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fcb16a1204f3c219cdb4b84dbef1f32cebacfa1a370d45839f44cd851aa44711 The OpenSSF Package Analysis project identified 'sap-ajaxrequest' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7529 Malicious code in sap-ajaxrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fcb16a1204f3c219cdb4b84dbef1f32cebacfa1a370d45839f44cd851aa44711 The OpenSSF Package Analysis project identified 'sap-ajaxrequest' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2013-5005

CVE-2013-5005 describes multiple cross-site scripting (XSS) vulnerabilities in Tripwire Enterprise 8.2 and earlier, exploitable via ajaxRequest/methodCall.do. The vulnerability arises through the parameters m_target_class_name, m_target_method_name, or m_request_context_params, which could allow ...

PT-2014-2889

Name of the Vulnerable Software and Affected Versions Tripwire Enterprise versions 8.2 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters. The...

CVE-2013-5005: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ajaxRequest/methodCall.do in Tripwire Enterprise 8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 mtargetclassname, 2 mtargetmethodname, or 3 mrequestcontextparams parameters...