MAL-2024-10709 Malicious code in promotion-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb9a77d5820e57e492fd4a0d3edaac6b239670f384d4cee56d88007f9550184b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in promotion-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb9a77d5820e57e492fd4a0d3edaac6b239670f384d4cee56d88007f9550184b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress B-Banner Slider plugin <= 1.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin B-Banner Slider versions = 1.1...

MAL-2024-12190 Malicious code in ansishade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c34f34cc1bdc60a4851d462f058187107a8c200d06ce08295d773f351fa1749a Importing the module starts the banner function, which downloads and runs an obfuscated remote script. The package seems to be a clone a one of existing simila...

WordPress B-Banner Slider Plugin <= 1.1 is vulnerable to Arbitrary File Upload

Software B-Banner Slider Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52405 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 1fa3975122b0 Credits stealthcopter Required privilege Subscriber...

WordPress Banner System plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin Banner System versions = 1.0.0...

WordPress Banner System Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Banner System Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51816 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ea8cc644eeb0 Credits ghsinfosec Required privilege Contributor...

CVE-2024-47317

Missing Authorization vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded.This issue affects Ads by WPQuads: from n/a through = 2.0.84...

CVE-2024-47317

The CVE-2024-47317 entry covers a Missing Authorization/Broken Access Control issue in the WordPress plugin Ads by WPQuads (WPQuads Ads) versions up to 2.0.84. The vulnerability is due to incorrectly configured access control, enabling unauthorized access for subscribers. Patch details in the con...

CVE-2024-49635

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Manzurul Haque Banner Slider allows Reflected XSS.This issue affects Banner Slider: from n/a through 2.1...

CVE-2024-49635

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in manjurul.cis Banner Slider banner-slider allows Reflected XSS.This issue affects Banner Slider: from n/a through = 2.1...

CVE-2024-49635 WordPress Banner Slider plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in manjurul.cis Banner Slider banner-slider allows Reflected XSS.This issue affects Banner Slider: from n/a through = 2.1...

CVE-2024-49635 WordPress Banner Slider plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Manzurul Haque Banner Slider allows Reflected XSS.This issue affects Banner Slider: from n/a through 2.1...

CVE-2024-49635

CVE-2024-49635 concerns the WordPress Banner Slider plugin (versions

PT-2024-33589 · Unknown · Manzurul Haque Banner Slider

Name of the Vulnerable Software and Affected Versions: Manzurul Haque Banner Slider versions through 2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations...

WordPress plugin Banner Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Discourse < 3.3.1, 3.4.x < 3.4.0.beta1 DoS Vulnerability

Discourse is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Eclipse Jetty DoS Vulnerability (GHSA-r7m4-f9h5-gr79) - Windows

Eclipse Jetty is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

WordPress Banner Slider plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Banner Slider versions = 2.1...

WordPress Banner Slider Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Software Banner Slider Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49635 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 54728b0228c3 Credits João Pedro S Alcântara Kinorth Require...