CVE-2024-0320

Cross-Site Scripting in FireEye Malware Analysis AX affecting version 9.0.3.936530. This vulnerability allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user...

CVE-2024-0320

Cross-Site Scripting in FireEye Malware Analysis AX affecting version 9.0.3.936530. This vulnerability allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user...

Cross site scripting

Cross-Site Scripting in FireEye Malware Analysis AX affecting version 9.0.3.936530. This vulnerability allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user...

CVE-2024-0320 Cross-Site Scripting in FireEye Malware Analysis (AX)

Cross-Site Scripting in FireEye Malware Analysis AX affecting version 9.0.3.936530. This vulnerability allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user...

CVE-2024-0320

CVE-2024-0320 is a Cross-Site Scripting issue in FireEye Malware Analysis (AX) affecting version 9.0.3.936530. The vulnerability allows an attacker to inject a crafted JavaScript payload via the application URL to retrieve a user’s session details. Public details consistently reference this vulne...

CVE-2024-0320 Cross-Site Scripting in FireEye Malware Analysis (AX)

Cross-Site Scripting in FireEye Malware Analysis AX affecting version 9.0.3.936530. This vulnerability allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user...

PT-2024-15468 · Fireeye · Fireeye Malware Analysis

Name of the Vulnerable Software and Affected Versions: FireEye Malware Analysis AX version 9.0.3.936530 Description: The issue allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user. This is achieved by...

Trellix Malware Analysis Cross-Site Scripting Vulnerability

Trellix Malware Analysis is a malware analysis software from Trellix, Inc. A cross-site scripting vulnerability exists in Trellix Malware Analysis version 9.0.3.936530, which stems from the presence of a cross-site scripting vulnerability. The vulnerability allows an attacker to send a specially...

MAL-2024-101 Malicious code in wdpr-validators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3603a1435c7217578ea596fa8e598c1a1a0bf6c955b1c4248b9c9978c9a1c6d4 The OpenSSF Package Analysis project identified 'wdpr-validators' @ 16.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in wdpr-validators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3603a1435c7217578ea596fa8e598c1a1a0bf6c955b1c4248b9c9978c9a1c6d4 The OpenSSF Package Analysis project identified 'wdpr-validators' @ 16.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in wdpr-device-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e68ddd57d0cced6084c7770f4e48230e223d896f927b8952e4cf5d05caa721f The OpenSSF Package Analysis project identified 'wdpr-device-detection' @ 24.7.16 npm as malicious. It is considered malicious because: - The...

MAL-2024-96 Malicious code in wdpr-node-http-error-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4afec8bd883f6042f7047f6b0d29cd37d57ef2e6f179a717a0ee7bbf44a16fe8 The OpenSSF Package Analysis project identified 'wdpr-node-http-error-handler' @ 16.1.1 npm as malicious. It is considered malicious because: -...

MAL-2024-95 Malicious code in wdpr-node-conversation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13bac8c43485c160298a14b6d17e48f8a18cf34bf9b2f1c73b77cc45a82b577b The OpenSSF Package Analysis project identified 'wdpr-node-conversation' @ 2.3.3 npm as malicious. It is considered malicious because: - The...

Malicious code in wdpr-node-cdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2c2f25a3f7cd69d4500c298b6a66498423b248384970031de6dc2fd42221ecd The OpenSSF Package Analysis project identified 'wdpr-node-cdn' @ 16.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-100 Malicious code in wdpr-ra-node-csp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f84a83ea13684761bce489c49b762047ea5f7cb2d68aa8e38f64842cbf224840 The OpenSSF Package Analysis project identified 'wdpr-ra-node-csp' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in synology-cft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ce8d0a13d9faee23cc5fc3a8ad9842e1ac0678ba3fd10d0bd453006cb82a88a7 The OpenSSF Package Analysis project identified 'synology-cft' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-89 Malicious code in heatwallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04a592accda6e728f314fbe238a01ef38f20a2f7a1e0a09aa4099bd79a8650d7 The OpenSSF Package Analysis project identified 'heatwallet' @ 10.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-88 Malicious code in pecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b4f977d84345ded72bac3adc44f78bfc69c9393bf8223ddff83c73b01673ca2 The OpenSSF Package Analysis project identified 'pecko' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-86 Malicious code in shoponline.epiroc.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0af86d9c1fc83f25835c1b437a93a6a278c5bcb1cfd811a0892fc93af187d0a4 The OpenSSF Package Analysis project identified 'shoponline.epiroc.com' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Detect and Manage the Risk of Apache Struts (CVE-2023-50164) Comprehensively

Introduction In the vast landscape of cybersecurity, staying vigilant against potential threats is crucial. A critical vulnerability that surfaced recently is CVE-2023-50164, affecting Apache Struts 2, a widely used open-source framework for Java development. This path traversal vulnerability,...