Insertion of Sensitive Information Into Sent Data

Overview @theia/ai-claude-code is a Theia - Claude Code Integration Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the rendering of Markdown image tags in AI chat responses. An attacker can cause sensitive information from the workspace o...

Malicious code in 0x2ai-demo7x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e956073a7db6057e4d42af462dba0299152ca992c113d74c715e90574d0efb On npm install, scripts/postinstall.cjs copies the package's payload/ tree into the installer's project root process.env.INITCWD, placing...

deep-code-security

deep-code-security Multi-language Static Application Security...

CVE-2026-24619

Missing Authorization vulnerability in PopCash PopCash.Net Code Integration Tool popcashnet-code-integration-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PopCash.Net Code Integration Tool: from n/a through = 1.8...

CVE-2026-24619

Missing Authorization vulnerability in PopCash PopCash.Net Code Integration Tool popcashnet-code-integration-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PopCash.Net Code Integration Tool: from n/a through = 1.8...

CVE-2026-24619 WordPress PopCash.Net Code Integration Tool plugin <= 1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in PopCash PopCash.Net Code Integration Tool popcashnet-code-integration-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PopCash.Net Code Integration Tool: from n/a through = 1.8...

CVE-2026-24619

Missing Authorization vulnerability in PopCash PopCash.Net Code Integration Tool popcashnet-code-integration-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PopCash.Net Code Integration Tool: from n/a through = 1.8...

CVE-2026-24619

CVE-2026-24619 : WordPress plugin PopCash Code Integration Tool (popcashnet-code-integration-tool) versions prior to 1.9 suffer Missing Authorization due to incorrectly configured access control. Public advisories (NVD/NVDRH/Red Hat) corroborate a medium impact with CVSS v3.1 base score 5.3 (Netw...

CVE-2026-24619: Missing Authorization

Missing Authorization vulnerability in PopCash PopCash.Net Code Integration Tool popcashnet-code-integration-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PopCash.Net Code Integration Tool: from n/a through = 1.8...

EUVD-2017-7232

Malware in sbrugna...

Wake up and smell the Javascript – website supply chain puts online retail at risk

There are more than 1.8 billion websites online today, and almost 98% of them are powered by JavaScript. There’s a good reason for this: JavaScript’s flexibility and portability enable the rich online functionality we’ve all come to know and love. But what happens when that same functionality...

Blue Cedar partners with Microsoft to combat BYOD issues

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. Bring Your Own Device BYOD has been a divisive topic within corporations for years. Employees wanted the convenience of working on their own smart devices, and business decision-make...

CVE-2017-15810

The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php...

Code injection

The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php...

CVE-2017-15810

The CVE-2017-15810 entry concerns the WordPress plugin PopCash.Net Code Integration Tool, version before 1.1. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the tab parameter in wp-admin/admin.php, allowing injection of scripts into a user’s browser. Documents consistently...

CVE-2017-15810

The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php...

CVE-2017-15810: Improper Neutralization of Input During Web Page Generation

The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php...

PopCash.Net Code Integration Tool <= 1.0 - Cross-Site Scripting (XSS)

The PopCash Code Integration Tool WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress PopCash.Net Publisher Code Integration 1.0 Cross Site Scripting Vulnerability

WordPress PopCash.Net Publisher Code Integration plugin version 1.0 suffers from a cross site scripting vulnerability. Credit Ricardo Sanchez Vulnerable PopCash.Net Publisher Code Integration plugin 1.0 PopCash.Net Publisher Code Integration plugin is prone to a cross-site scripting vulnerability...

How Visual Studio Makes Your Applications Vulnerable to Binary Planting

Microsoft Visual Studio can automatically make an application binary planting-positive i.e., vulnerable even when the developer makes no programming errors. Every MFC application seems to be automatically made vulnerable, with those statically linking MFC libraries actually having the vulnerable...