Malicious code in cms-site-api-js-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c005e0d9ed50229f543036c5c8bd9dd61a1ad0b5373efab2aa9fdba45084f9 The package cms-site-api-js-client was found to contain malicious code. Source: ghsa-malware...

MAL-2026-2600 Malicious code in cms-site-api-js-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c005e0d9ed50229f543036c5c8bd9dd61a1ad0b5373efab2aa9fdba45084f9 The package cms-site-api-js-client was found to contain malicious code. Source: ghsa-malware...

CVE-2022-46769 Apache Sling App CMS: XSS in CMS Site Group Detail

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Sling App CMS version 1.1.2 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting XSS attack in the site group feature. Upgrade to Apache Sling...

@app-box/web (=1.0.0), @comet/cms-site (>=3.0.0-canary.160.0 <=4.0.0-canary.1049.0) +33 more potentially affected by CVE-2022-24858 via next-auth (>=0.0.0-manual.83c4ebd1 <=3.29.10)

next-auth NPM version =0.0.0-manual.83c4ebd1, =3.0.0-canary.160.0, =2.0.1-canary.24.0, =1.0.99-0.next12, =0.1.0, =0.46.0, =0.30.0, =0.3.0, =0.10.0, =0.2.0, =0.3.0, =0.3.0, =0.4.0, =0.1.0, =0.1.3 and more Source cves: CVE-2022-24858 Source advisory: OSV:GHSA-F9WG-5F46-CJMW...

Inscribe Webmedia SQL Injection

Inscribe Webmedia SQL Injection ========================================================= Exploit Title : Inscribe Webmedia SQL Injection Date : 14 July 2011 Author : Netrondoank aka netron Platform/Tested on: Linux myweb : http://www.ilmuhacker.org Version : none Software Link: :...

Inscribe Webmedia - SQL Injection

Inscribe Webmedia - SQL Injection Inscribe Webmedia SQL Injection ========================================================= Exploit Title : Inscribe Webmedia SQL Injection Date : 14 July 2011 Author : Netrondoank aka netron Platform/Tested on: Linux myweb : http://www.ilmuhacker.org Version : non...

Inscribe Webmedia SQL Injection Vulnerability

Exploit for php platform in category web applications Inscribe Webmedia SQL Injection ========================================================= Exploit Title : Inscribe Webmedia SQL Injection Date : 14 July 2011 Author : Netrondoank aka netron Platform/Tested on: Linux myweb :...

CU Village CMS Site 1.0 - print_view Blind SQL Injection

CU Village CMS Site 1.0 - printview Blind SQL Injection +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2010 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

Weight Loss Recipe Book 3.1 (Auth Bypass) SQL Injection Vuln

No description provided by source. Weight Loss Recipe Book 3.1 Autore: x0r Emails: [email protected] \ [email protected] Cms Site: http://www.my-health-and-fitness.org/weight-loss-recipe-book.html Bug In \wlrbfiles\admin-login.php SELECT FROM ' . $programprefix . 'administrators WHERE...

xgb-bypass.txt

/ xGB 2.0 xGB.php Remote Permission Bypass Vulnerability Bug discovered by DarkFuneral http://www.darkfuneral89.altervista.org/ Affected Software: xGB CMS Site: "i don't know! :P" Severity: Critical Description: An attacker can edit all message in xGB Google Dork: allinurl:"xGb.php" E-Mail:...

xGB 2.0 - xGB.php Remote Security Bypass

xGB 2.0 - xGB.php Remote Security Bypass / xGB 2.0 xGB.php Remote Permission Bypass Vulnerability Bug discovered by DarkFuneral http://www.darkfuneral89.altervista.org/ Affected Software: xGB CMS Site: "i don't know! :P" Severity: Critical Description: An attacker can edit all message in xGB Goog...