PT-2022-26909 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Custom Checkbox Parameter Plugin versions 1.4 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability, which can be exploited by attackers with Item/Configure permission. This occurs because the...

CVE-2022-43425

CVE-2022-43425 affects Jenkins Custom Checkbox Parameter Plugin (versions ≤ 1.4). The issue is a stored XSS caused by not escaping the name/description of Custom Checkbox Parameter parameters on parameter-listing views, exploitable by users with Item/Configure permission. Exploitation requires pa...

Nextcloud: Secure view trivial to bypass

The secure view feature in Nextcloud was vulnerable to bypassing, allowing users to download files without watermarks. This was possible by using the richdocuments app and adding "/contents" to the URL. The checkbox indicating that downloading is not allowed was misleading, and a solution could b...

CVE-2022-31160

A flaw was found in the jquery-UI package. Affected versions of this package are vulnerable to Cross-site scripting XSS attack via the initialization of a check-box-radio widget on an input tag enclosed within a label, leading to the parent label contents being considered as the input label...

MAL-2022-487 Malicious code in @ovh-ui/oui-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc446acbcde3cb8149a13344305559cde9a9acee013c00efa4096db154923897 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @ovh-ui/oui-checkbox is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in @harrysforge/checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1377993075e7b1dbcad8e184e13eab34d3318f41f91a63595418bb45949f18e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-309 Malicious code in @harrysforge/checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1377993075e7b1dbcad8e184e13eab34d3318f41f91a63595418bb45949f18e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yahoo-react-checkbox-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385208ccd7b1950edcb114c1e908cf88eff1a39de277bc22a30cd0d8dae2344b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7307 Malicious code in yahoo-react-checkbox-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385208ccd7b1950edcb114c1e908cf88eff1a39de277bc22a30cd0d8dae2344b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/checkbox-boxed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaeb0cc30dd0ebe2f291e5f8800e5e239c91df14eb22ca8ce4140697249acadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-650 Malicious code in @tinkoff-react-bui/checkbox-boxed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaeb0cc30dd0ebe2f291e5f8800e5e239c91df14eb22ca8ce4140697249acadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Checkbox Survey Remote Code Execution (CVE-2021-27852)

A remote code execution vulnerability exists in Checkbox Survey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Checkbox Survey 6.12 <= 6.18 RCE

Checkbox Survey is an ASP.NET application that can add survey functionality to a website. Prior to version 7.0, Checkbox Survey implements its own View State functionality by accepting a VSTATE argument, which it then deserializes using LosFormatter. Because this data is manually handled by the...

Checkbox Survey Web Detection

Binary data checkboxsurveywebapidetect.nbin...

CVE-2022-29533

An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a "weird single checkbox page."...

PT-2022-19683 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.158 Description: The issue is related to a Cross-Site Scripting XSS vulnerability in the app/Controller/OrganisationsController.php file, specifically in situations involving a "weird single checkbox page."...

Checkbox Survey Deserialization of Untrusted Data Vulnerability

Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code...

VulnCheck KEV: CVE-2021-27852

Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code...

CVE-2022-27202

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the value and description of extended choice parameters of radio buttons or check boxes type, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...