Malicious code in alef-frontend (npm)

The package alef-frontend was found to contain malicious code...

MAL-2025-48480 Malicious code in alef-frontend (npm)

The package alef-frontend was found to contain malicious code...

CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection

Affected packages The vulnerability has been discovered in the core HTML parsing module and may affect all editor instances that: Enabled full-page editing mode, or enabled CDATA elements in Advanced Content Filtering configuration defaults to script and style elements. Impact A potential...

alef-elektro.ru Cross Site Scripting vulnerability OBB-1258697

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

iran.alef.ir Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145658 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting iran.alef.ir website and its users. Following...