Cross site scripting

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solution EUCS v.1.0 allows a remote attacker to gain privileges via the URL path of the eucsAdmin login web page...

CVE-2023-29837

The CVE describes a Cross-Site Scripting (XSS) vulnerability in Exelysis Unified Communication Solution (EUCS) v1.0. The issue affects the eucsAdmin login web page, where an attacker can craft a URL path to execute scripts, potentially enabling remote privilege gain. The NVD/CVE metadata indicate...

CVE-2023-29837

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solution EUCS v.1.0 allows a remote attacker to gain privileges via the URL path of the eucsAdmin login web page...

CVE-2023-29837

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solution EUCS v.1.0 allows a remote attacker to gain privileges via the URL path of the eucsAdmin login web page...

Exelysis Unified Communication Solutions 跨站脚本漏洞

Exelysis Unified Communication Solutions EUCS is a unified communication solution from Exelysis, Inc. A security vulnerability exists in Exelysis Unified Communication Solutions version v.1.0, which stems from the presence of a cross-site scripting CSS vulnerability that could allow an attacker t...

China's Mustang Panda Hackers Exploit TP-Link Routers for Persistent Attacks

The Chinese nation-state actor known as Mustang Panda has been linked to a new set of sophisticated and targeted attacks aimed at European foreign affairs entities since January 2023. An analysis of these intrusions, per Check Point researchers Itay Cohen and Radoslaw Madej, has revealed a custom...

kernel: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware so broken that it will send a reply message before a FWREADY message it is not yet clear if...

kernel: ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware so broken that it will send a reply message before a FWREADY message it is not yet clear if FWREADY...

kommunikation-design.com Cross Site Scripting vulnerability OBB-3341012

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in security-util-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2309de1524c064d7eba8b0c288762426955241d23e00eaaeca7766758ab9054e The OpenSSF Package Analysis project identified 'security-util-py' @ 0.0.6 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1184 Malicious code in fusion-ng-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a24d384788c5f4810ac97c4f6ab429d9ef27b7dde67f62839ca68e7924695349 The OpenSSF Package Analysis project identified 'fusion-ng-theme' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in fusion-ng-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a24d384788c5f4810ac97c4f6ab429d9ef27b7dde67f62839ca68e7924695349 The OpenSSF Package Analysis project identified 'fusion-ng-theme' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

The Hand-y Etiquette of Modern All-Remote Culture

In today’s fast-paced digital world, remote work has become the new normal. With the rise of video conferencing platforms like Zoom and Microsoft Teams, we have adapted to an all-remote culture where communication is largely virtual. One aspect of this culture that has become increasingly importa...

MAL-2023-1210 Malicious code in indoorviewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d122f62071d7bd6fa6a2bf6fad646576aac0cb7826254901e07af309d40e2347 The OpenSSF Package Analysis project identified 'indoorviewer' @ 100.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in verycoolzpac2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 50b609e8ebccac67716745b1447224238ae17c0a78499f90c48aa684d971cded The OpenSSF Package Analysis project identified 'verycoolzpac2' @ 0.0.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in verycoolzpac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5375ee65b8d94a515b53e30980d783a66b8f75c2ad0f388f471e41b0dada5587 The OpenSSF Package Analysis project identified 'verycoolzpac' @ 0.39.9999 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1204 Malicious code in hyrule-react-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b82bec5139c178e3b425e5e458a9c7b248b17db5192cf6178702cbb26822dba The OpenSSF Package Analysis project identified 'hyrule-react-commons' @ 2.0.1 npm as malicious. It is considered malicious because: - The packa...

Buffer overflow

Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. :Satera LBP660C...

MAL-2023-1348 Malicious code in xdefi-distribution (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 352ef361ef8485fc98aa4e128cd2942a1de8926508bc3b2f76b0cbbe831ee3af The OpenSSF Package Analysis project identified 'xdefi-distribution' @ 99.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-1411 Malicious code in spammingsynonyms (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b06c2a9bef8741ecd851e448b284d8c0eef63b726a77662a1e4f3aec34119f80 The OpenSSF Package Analysis project identified 'spammingsynonyms' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...