MAL-2025-3063 Malicious code in at-authorize-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17db7733ab98695568b1f41dba8b8b5d956a4fefa940f73863c0d2b1e2974845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-5104 · WordPress · Wp Service Payment Form With Authorize.Net

Name of the Vulnerable Software and Affected Versions: WP Service Payment Form With Authorize.net versions n/a through 2.6.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. This means an attacker can trick a user into performing unintended...

WordPress plugin Accept Authorize.NET Payments Using Contact Form 信息泄露漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. An information disclosure vulnerabili...

PT-2024-17508 · WordPress · Accept Authorize.Net Payments Using Contact Form 7

Name of the Vulnerable Software and Affected Versions: Accept Authorize.NET Payments Using Contact Form 7 plugin for WordPress versions up to, and including, 2.2 Description: The issue allows unauthenticated attackers to extract configuration data via the cf7adn-info.php file, which can be used t...

WordPress Accept Authorize.NET Payments Using Contact Form 7 plugin <= 2.2 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by Joshua Chan in WordPress Plugin Accept Authorize.NET Payments Using Contact Form 7 versions = 2.2...

WordPress WP Service Payment Form With Authorize.net plugin <= 2.6.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin WP Service Payment Form With Authorize.net versions = 2.6.3...

WordPress plugin WP Service Payment Form With Authorize.net 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

org.jenkins-ci.plugins:role-strategy (=675.va_5f27678f6d6) potentially affected by CVE-2024-52552 via org.jenkins-ci.plugins:authorize-project (=1.7.0)

org.jenkins-ci.plugins:authorize-project MAVEN version =1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:authorize-project and may be impacted: - org.jenkins-ci.plugins:role-strategy =675.va5f27678f6d6 Source cves:...

GHSA-8886-8V27-85J8 Stored XSS vulnerability in Jenkins Authorize Project Plugin

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. This results in a stored cross-site...

Stored XSS vulnerability in Jenkins Authorize Project Plugin

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. This results in a stored cross-site...

CVE-2024-52552

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2024-52552

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2024-52552

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2024-52552

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

PT-2024-35374 · Jenkins · Jenkins Authorize Project Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Authorize Project Plugin versions 1.7.2 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs when a string containing the job name is evaluated with JavaScript on the Authorizatio...

Jenkins plugin Authorize Project 跨站脚本漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

The vulnerability of the /core/authorize.php file in the Drupal CMS system allows a hacker to disclose protected information.

The vulnerability of the /core/authorize.php file in the Drupal CMS system relates to the exposure of system data by unauthorized individuals in the controlled area. Exploiting this vulnerability could allow attackers to disclose protected information through the hashsalt parameter in the...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal version 11.x-dev, which stems from a full-path disclosure issue in the core/authorize.php file, resulting in full-path information being disclosed...

GHSA-HMQF-WPQ9-JQ83 Spring Security Missing Authorization vulnerability

Missing Authorization When Using @AuthorizeReturnObject in Spring Security 6.3.0 and 6.3.1 allows attacker to render security annotations inaffective...

Spring Security 安全漏洞

VMware Spring Security is a set of security frameworks from VMware that provide illustrative security for Spring-based applications. A security vulnerability exists in Spring Security versions 6.3.0 and 6.3.1, which stems from a lack of authorization when using @AuthorizeReturnObject, and allows ...