Malicious code in edmunds-vin (RubyGems)

--- Credit: OpenSSF source...

MAL-2024-6883 Malicious code in edmunds-vin (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in edmunds-vin (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

tableaudev.edmunds.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146803 Security Researcher OakdaleHutch Helped patch 26 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting tableaudev.edmunds.com website and its users...

Malicious Package

Overview edmunds-vin is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using edmunds-vin...

edmunds.com XSS vulnerability

Open Bug Bounty ID: OBB-488659 Description| Value ---|--- Affected Website:| edmunds.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

edmunds.com XSS vulnerability

Vulnerable URL: http://www.edmunds.com/alfa-romeo/4c/2016/convertible/?src=1471004796452%20%22%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E%22 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:23 GMT Vulnerability type:| X...