10991 matches found
CVE-2022-23077 Habitica - DOM XSS in login page
In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page...
CVE-2022-23077
Habitica (HabitRPG) versions 4.119.0–4.232.2 are affected by a DOM-based XSS on the login page. Root cause: insufficient validation/escaping of user-supplied data leading to reflected input in the DOM. Impact: cross-site scripting via the login page; potential for session/credential exposure if u...
CVE-2022-23077 Habitica - DOM XSS in login page
In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page...
Malicious code in wm-jquery-shadow-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cce2934c0da39a0931ddef4e3d88c8f5afb631e708767cf3b4e98ec4dff7464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7196 Malicious code in wm-jquery-shadow-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cce2934c0da39a0931ddef4e3d88c8f5afb631e708767cf3b4e98ec4dff7464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in isomsorphic-react-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5cb42b8400c90362f3b20685e648e98824dfcbfb667b1af00eba3754bdd507 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3969 Malicious code in isomsorphic-react-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5cb42b8400c90362f3b20685e648e98824dfcbfb667b1af00eba3754bdd507 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6715 Malicious code in typescript-dom-lib-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75be6711c73ad24a7b04bb490d8390cd6f717b03cc7fcf664e61ee0f52ffa48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in typescript-dom-lib-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75be6711c73ad24a7b04bb490d8390cd6f717b03cc7fcf664e61ee0f52ffa48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6903 Malicious code in vendor-react-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63a0b5099ec6bd274fd7bf4c2d20f7862fa2c1352b283b43f8a1f63a79b0ce38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vendor-react-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63a0b5099ec6bd274fd7bf4c2d20f7862fa2c1352b283b43f8a1f63a79b0ce38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-dom-is (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a992e0b69df1d0c12f913e0477532f0900953868530bc27dc69063307359e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5641 Malicious code in react-dom-is (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a992e0b69df1d0c12f913e0477532f0900953868530bc27dc69063307359e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4438 Malicious code in lyte-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7431369925fe1450c5e92d750aef6efa49476ab665cc1c0d319c88dcf02d79e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in lyte-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7431369925fe1450c5e92d750aef6efa49476ab665cc1c0d319c88dcf02d79e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-instantsearch-hooks-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436eaaea08d9bd23560c9330c0c30b94c80a292e8bf007cf128e9846c8068075 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5649 Malicious code in react-instantsearch-hooks-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436eaaea08d9bd23560c9330c0c30b94c80a292e8bf007cf128e9846c8068075 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-29455
DOM-based Reflected Cross-Site Scripting XSS vulnerability in Elementor's Elementor Website Builder plugin = 3.5.5 versions...
