Woo Discount Rules < 2.4.2 - Reflected Cross-Site Scripting

The plugin does not escape a parameter before outputting it back in an attribute of the plugin's discount rule page, leading to Reflected Cross-Site Scripting https://example.com/wp-admin/admin.php?page=woodiscountrules&name="+style=animation-name:rotation+onanimationstart=alert/XSS///...

CVE-2022-34305 XSS in examples web application

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

Malicious Package

Overview example-data-fetching is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview example-typescript is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious Package

Overview example-rust is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview example-api-routes is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious Package

Overview example-google-analytics is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview react-swipeable-wrapper-example is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable i...

CVE-2022-34305: Improper Neutralization of Input During Web Page Generation

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

Malicious code in nodejs-docs-samples-iot-mqtt-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a02c1e75441fabe4bcc6557ef33ce2bba5bdb671f2147161ddf0d05a90809ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3015 Malicious code in fetchr-simple-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00c55fe8ab94290b13b577dde8ad8db6827bd0592b5d1ad48785168d04e39714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fetchr-simple-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00c55fe8ab94290b13b577dde8ad8db6827bd0592b5d1ad48785168d04e39714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2153 Malicious code in conjure-receipe-example-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc11915a916778452b6763c69c17c41c18485b0a60c687985bb7c5b677882e0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in conjure-receipe-example-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc11915a916778452b6763c69c17c41c18485b0a60c687985bb7c5b677882e0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4435 Malicious code in lyft-node-sdk-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3fca88a5e88f640bd29c31780f0abe26a1265da8ebbb498b9d8017de5250fef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in monday-example-app-word-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b3c3fffedb87defe8c507e9f81253886a350cf6996c70a678032c6a597cc6fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4674 Malicious code in monday-example-app-word-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b3c3fffedb87defe8c507e9f81253886a350cf6996c70a678032c6a597cc6fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-camera-kit-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3e82d1c530731419cac7916aa1d029e236fcebde8ca18509bda12493d281970 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in charting-library-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cba3185261bbaca364e13eb20f22442df73c6fa2a62f6387cb1a6215d99ecd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myjohndeereapi-oauth2-nodejs-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8e396af178eba7a59aaabef53f2a909b237f1fbb21b5735f93c3607d5f87421 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...