mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install mongoaudit...

The vulnerability in the email report sending process of the Reports.PHP script allows a perpetrator to write any file onto the disk.

The vulnerability in the email report sending process of the Reports.PHP script is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to write any file to the disk...

EUVD-2004-0535

Malware in sbrugna...

EUVD-2023-31363

Malicious code in bioql PyPI...

CVE-2023-27627

Unauth. Reflected Cross-Site Scripting XSS vulnerability in eggemplo Woocommerce Email Report plugin = 2.4 versions...

CVE-2023-27627

Unauth. Reflected Cross-Site Scripting XSS vulnerability in eggemplo Woocommerce Email Report plugin = 2.4 versions...

CVE-2023-27627

Unauth. Reflected Cross-Site Scripting XSS vulnerability in eggemplo Woocommerce Email Report plugin = 2.4 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in eggemplo Woocommerce Email Report plugin = 2.4 versions...

CVE-2023-27627 WordPress Woocommerce Email Report Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in eggemplo Woocommerce Email Report plugin = 2.4 versions...

CVE-2023-27627

CVE-2023-27627 is an Unaunthenticated Reflected XSS in the WordPress plugin Eggemplo WooCommerce Email Report (versions

CVE-2023-27627: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in eggemplo Woocommerce Email Report plugin = 2.4 versions...

PT-2023-21264 · Unknown · Eggemplo Woocommerce Email Report

Name of the Vulnerable Software and Affected Versions: eggemplo Woocommerce Email Report plugin versions = 2.4 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website...

WordPress Woocommerce Email Report Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)

Software Woocommerce Email Report Type Plugin Vulnerable versions = 2.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27627 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 629859a93d95 Credits Yuki Haruma...

Malicious Package

Overview email-report is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in email-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a26f280816f19cb1307ffabf2da3a9ecf9e78f457545b2957088c98eb976447 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2709 Malicious code in email-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a26f280816f19cb1307ffabf2da3a9ecf9e78f457545b2957088c98eb976447 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-0027

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not hav...

CVE-2022-0027 Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not hav...

CVE-2022-0027

CVE-2022-0027 involves an improper authorization vulnerability in Palo Alto Networks Cortex XSOAR where authenticated users in non-Read-Only groups can generate an email report containing summary information about all incidents, including those the user cannot access. Affected: Cortex XSOAR 6.1–6...

CVE-2022-0027

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not hav...