PT-2025-54315

Name of the Vulnerable Software and Affected Versions Neilgee Bootstrap Modals versions through 1.3.2 Description A flaw exists in Neilgee Bootstrap Modals that allows for Stored Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. Successful...

WordPress plugin Bootstrap Modals 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Twitter Bootstrap Collapse aka Accordian Shortcode plugin <= 1.0 - Stored XSS via Shortcode vulnerability

Stored XSS via Shortcode vulnerability discovered by Bob Matyas in WordPress Plugin Twitter Bootstrap Collapse aka Accordian Shortcode versions = 1.0...

CVE-2025-62095: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in neilgee Bootstrap Modals bootstrap-modals allows Stored XSS.This issue affects Bootstrap Modals: from n/a through = 1.3.2...

Malicious code in bootstrap-setflexcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90557c8cf061fb243537b42df1c27af4fc410d5a3bbeb6df2346720058fa9d4f The package bootstrap-setflexcolor was found to contain malicious code...

EUVD-2025-204935

Malicious code in bootstrap-setflexcolor npm...

MAL-2025-192718 Malicious code in bootstrap-setflexcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90557c8cf061fb243537b42df1c27af4fc410d5a3bbeb6df2346720058fa9d4f The package bootstrap-setflexcolor was found to contain malicious code...

Malicious code in bootstrap-setcolors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49438d0a37b288cf5dcbc9c27b5bc18510beec255d1d359a1f5a25361d4b121e The package bootstrap-setcolors was found to contain malicious code...

EUVD-2025-204936

Malicious code in bootstrap-setcolors npm...

MAL-2025-192717 Malicious code in bootstrap-setcolors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49438d0a37b288cf5dcbc9c27b5bc18510beec255d1d359a1f5a25361d4b121e The package bootstrap-setcolors was found to contain malicious code...

Malicious code in bootstrap-setcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e711bb0bea7ae170d6be10137758bbb8e7d4fd0d987de9183d58c6ee224f41 The package bootstrap-setcolor was found to contain malicious code...

EUVD-2025-204937

Malicious code in bootstrap-setcolor npm...

MAL-2025-192716 Malicious code in bootstrap-setcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e711bb0bea7ae170d6be10137758bbb8e7d4fd0d987de9183d58c6ee224f41 The package bootstrap-setcolor was found to contain malicious code...

FastAdmin SQL注入漏洞

FastAdmin is a set of web backend development framework based on ThinkPHP and Bootstrap by Karson's personal developer. FastAdmin 1.7.0.20250506 and earlier versions exist SQL injection vulnerability, the vulnerability stems from the application/common/controller/Backend.php file...

PYSEC-2025-103

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous...

PYSEC-2025-103

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous...

CVE-2025-63387

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous...

Medium: aws-cfn-bootstrap

Issue Overview: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc...

XSS in Bootstrap button component

...

Malicious Package

Overview bootstrap-setflexcolor is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this...