MAL-2023-8519 Malicious code in oasis-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bbbb6d6d51b6b4eae513979526b1a1d3c7c7b9947f319737a35fe899336adfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oasis-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bbbb6d6d51b6b4eae513979526b1a1d3c7c7b9947f319737a35fe899336adfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Multiple Critical Vulnerabilities in Juniper Exploited in the Wild

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Multiple vulnerabilities have been discovered in Juniper Networks Junos OS, with the potential for pre-auth Remote Code Execution when chained in Juniper devices. Juniper Networks has confirmed th...

CVE-2023-47528

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sajjad Hossain Sagor WP Edit Username plugin = 1.0.5 versions...

CVE-2023-47528

CVE-2023-47528 concerns the WP Edit Username WordPress plugin (

CVE-2023-47533 WordPress Countdown and CountUp, WooCommerce Sales Timer Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in wpdevart Countdown and CountUp, WooCommerce Sales Timer plugin = 1.8.2 versions...

CVE-2023-47546

CVE-2023-47546 affects Walter Pinem OneClick Chat to Order plugin (versions

Cross site scripting

Auth. Shop Manager+ Stored Cross-Site Scripting XSS vulnerability in CedCommerce Recently viewed and most viewed products plugin = 1.1.1 versions...

CVE-2023-47554

The CVE-2023-47554 entry concerns the DenK BV Actueel Financieel Nieuws – Denk Internet Solutions WordPress plugin. Affected versions are &lt;= 5.1.0 (per NVD/Red Hat/WPVulndb entries), with an Auth. admin+ Stored XSS vulnerability in configurable settings that could be triggered by elevated-priv...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in livescore.Bz BZScore – Live Score plugin = 1.03 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Abu Bakar TWB Woocommerce Reviews plugin = 1.7.5 versions...

CVE-2023-47658

CVE-2023-47658 is an authenticated Stored XSS in actpro Extra Product Options for WooCommerce (plugin

CVE-2023-47659

CVE-2023-47659 is a stored XSS vulnerability in the Lava Directory Manager WordPress plugin by Lavacode, affecting versions up to 1.1.34. The vulnerability is exploitable by an authenticated contributor (per Patchstack) and remains unpatched in the public release history. Multiple sources corrobo...

CVE-2023-47657

Auth. ShopManager+ Stored Cross-Site Scripting XSS vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin = 1.5.8 versions...

PT-2023-30534 · Cedcommerce · Cedcommerce Recently Viewed/Most Viewed Products Plugin

Name of the Vulnerable Software and Affected Versions: CedCommerce Recently viewed and most viewed products plugin versions prior to 1.1.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with Auth Shop Manager+ permissions. Recommendations: F...

CVE-2023-36688

CVE-2023-36688 affects WordPress Simple Site Verify plugin (versions

CVE-2023-47229

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Vyas Dipen Top 25 Social Icons plugin = 3.1 versions...

CVE-2023-47231

CVE-2023-47231 affects Bainternet ShortCodes UI plugin on WordPress (versions

CVE-2023-47227

The CVE-2023-47227 entry corresponds to an authenticated Stored XSS in the WordPress plugin “Social Feed | All social media in one place” (Web-Settler Social Feed)

CVE-2023-47223

CVE-2023-47223 affects the WordPress plugin Basic Interactive World Map (WP Map Plugins) version ≤ 2.0. The vulnerability is a stored XSS due to inadequate escaping of input in the affected component, with an attacker (admin+ privileges) able to trigger it. The issue is classified with low to med...