101 matches found
MAL-2022-5801 Malicious code in ringcentral-embeddable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2303a28c76ef17d4e75fba07bfd2babea89fc6b920625a97497ea3d58bea689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ringcentral-embeddable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2303a28c76ef17d4e75fba07bfd2babea89fc6b920625a97497ea3d58bea689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in engage-voice-embeddable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3893913d5991d5888f072fb5bbf309b8b7010adaaa82fc42e345e155e3176c90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ringcentral-embeddable-voice-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26708790bea350630a42eef22ba9983932628c0a5bd1b2dbf0f4e9918a03e38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5803 Malicious code in ringcentral-embeddable-rcv-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da68955a1904398fe86c055d6519637d9cfc03bd537939c4de96ff3492b6bd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ringcentral-embeddable-rcv-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da68955a1904398fe86c055d6519637d9cfc03bd537939c4de96ff3492b6bd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5802 Malicious code in ringcentral-embeddable-rcv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e04948ff03ec62315dd0e3d33e3e94e2a7746f28be0f3f60bfec43ab1017be41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ringcentral-embeddable-rcv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e04948ff03ec62315dd0e3d33e3e94e2a7746f28be0f3f60bfec43ab1017be41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-94RJ-C4JJ-V476 Jenkins Embeddable Build Status Plugin contains Cross-site Scripting
A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin...
GHSA-7RPJ-HG47-CX62 Improper Restriction of XML External Entity Reference in com.h2database:h2.
H2 is an embeddable RDBMS written in Java. The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity XXE Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data from org.h2.jdbc.JdbcResultSet.getSQLXML method. If it...
Install Python for Windows
This module places an embeddable Python3 distribution onto the target file system, granting pentesters access to a lightweight Python interpreter. This module does not require administrative privileges or user interaction with installation prompts. This module requires Metasploit:...
Cross site scripting
A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin...
CVE-2019-10346
A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin...
CVE-2019-10346
Summary of CVE-2019-10346 : A reflected cross-site scripting vulnerability in the Jenkins Embeddable Build Status Plugin (versions ≤ 2.0.1) allows attackers to inject arbitrary HTML and JavaScript into the plugin response. The issue stems from unsafe handling of output in the plugin, enabling cli...
PT-2019-11745 · Jenkins · Jenkins Embeddable Build Status Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Embeddable Build Status Plugin versions 2.0.1 and earlier Description: A reflected cross site scripting issue allows attackers to inject arbitrary HTML and JavaScript into the response of the plugin. This enables them to execute...
Reflected XSS vulnerability in embeddable-build-status
embeddable-build-status did not sanitize arguments provided in the query string, resulting in a reflected cross-site scripting vulnerability. Arguments are now sanitized...
CVE-2019-10346: Improper Neutralization of Input During Web Page Generation
A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin...
Vimeo: Private, embeddable videos leaks data through Facebook & Open Graph
Clip meta-data disclosed to thrid-party crawlers...
[SECURITY] Fedora 21 Update: ipython-2.4.1-8.fc21
IPython provides a replacement for the interactive Python interpreter with extra functionality. Main features: Comprehensive object introspection. Input history, persistent across sessions. Caching of output results during a session with automatically generated references. Readline based name...
[SECURITY] Fedora 22 Update: ipython-2.4.1-7.fc22
IPython provides a replacement for the interactive Python interpreter with extra functionality. Main features: Comprehensive object introspection. Input history, persistent across sessions. Caching of output results during a session with automatically generated references. Readline based name...