CVE-2022-34618

A stored cross-site scripting XSS vulnerability in Mealie 1.0.0beta3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the recipe description text field...

PT-2022-20594 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse affected versions not specified Description: Discourse is an open source discussion platform. In affected versions, an email activation route can be abused to send mass spam emails. A fix has been included in the latest stable, beta...

Important: Red Hat Security Advisory: container-tools:rhel8 security and bug fix update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

kubernetes-client: Insecure deserialization in unmarshalYaml method

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML...

CVE-2022-2290

Cross-site Scripting XSS - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta...

CVE-2022-2290

Cross-site Scripting XSS - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta...

ERPNext 跨站脚本漏洞

ERPNext is an open source enterprise resource planning solution from ERPNext India. A cross-site scripting vulnerability exists in ERPNext versions v13.0.0-beta.13 through v13.30.0, which can be exploited by an attacker to conduct an account takeover attack with a low-privileged user...

Malicious code in @tekion/beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25635e252b9808c78842badaf5878dca711e8678777c82f2327a3561c58a7d7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-627 Malicious code in @tekion/beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25635e252b9808c78842badaf5878dca711e8678777c82f2327a3561c58a7d7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4870 Malicious code in noblox.js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 332a81ed84651ca22b9a949cc938519334d55fc1b9a8fce6a5b123de2098ef96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noblox.js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 332a81ed84651ca22b9a949cc938519334d55fc1b9a8fce6a5b123de2098ef96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41ff73fb3183f69a72984a800fd1acb09d2a242b539d96f17ef1b398885cf1c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2500 Malicious code in discord.js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41ff73fb3183f69a72984a800fd1acb09d2a242b539d96f17ef1b398885cf1c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2012 Malicious code in colors-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36ae9b59011439265f622f08d6873bd4dfa0eb2c1da65f0ab540d273346d1f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36ae9b59011439265f622f08d6873bd4dfa0eb2c1da65f0ab540d273346d1f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1388 Malicious code in azure-template-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b10d6fbf59581245f9918f3edb36dbc7879dee46d5b4d15555e411f29da0cf76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-dnsresolver-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a616354b1b2aac64d8b3bc18582cb0c0ed41bc7f2db436598b320afcab1b6aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-dnsresolver-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bb9f7982e1b5b7a8cf2ecd8a6a62a8b372d80d1e0d2cddfdd9f99038c29befb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1261 Malicious code in azure-arm-mobilenetwork-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1835cdc00e29dec5a3b51f5da1d340fc8cacc3e53602f970c4a02881ba125a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1237 Malicious code in azure-arm-containerregistry-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3bc278f7453c5e3fcd0ef73ed4014c2d04941b6b4ac6e7d304280f2c9dee23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...