774 matches found
CVE-2025-22531
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in M Bilal M Urdu Formatter – Shamil allows Stored XSS.This issue affects Urdu Formatter – Shamil: from n/a through 0.1...
CVE-2025-22531 WordPress Urdu Formatter – Shamil plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in M Bilal M Urdu Formatter – Shamil urdu-formatter-shamil allows Stored XSS.This issue affects Urdu Formatter – Shamil: from n/a through = 0.1...
CVE-2025-22531
CVE-2025-22531 is a stored XSS in Urdu Formatter – Shamil (WordPress plugin). Descriptions from Red Hat and Wordfence cite improper neutralization of input during web page generation, enabling stored cross-site scripting. CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L with a base score ...
WordPress Urdu Formatter – Shamil plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Urdu Formatter – Shamil versions = 0.1...
WordPress plugin Urdu Formatter – Shamil 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
Malicious code in eslint-formatter-richhtml (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1882bf6a70efa173960185fd119365caef76186573c332b079148bd0e752f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11035 Malicious code in eslint-formatter-richhtml (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1882bf6a70efa173960185fd119365caef76186573c332b079148bd0e752f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-45511
An issue was discovered in Zimbra Collaboration ZCS through 10.1. A reflected Cross-Site Scripting XSS issue exists through the Briefcase module due to improper sanitization of file content by the OnlyOffice formatter. This occurs when the victim opens a crafted URL pointing to a shared folder...
CVE-2024-45511
CVE-2024-45511 affects Zimbra Collaboration (ZCS) up to 10.1, via the Briefcase module. The root cause is improper sanitization of file contents by the OnlyOffice formatter, allowing a crafted URL to a shared folder containing a malicious file to execute arbitrary JavaScript in the victim’s sessi...
CVE-2024-45511
An issue was discovered in Zimbra Collaboration ZCS through 10.1. A reflected Cross-Site Scripting XSS issue exists through the Briefcase module due to improper sanitization of file content by the OnlyOffice formatter. This occurs when the victim opens a crafted URL pointing to a shared folder...
CVE-2024-45511
An issue was discovered in Zimbra Collaboration ZCS through 10.1. A reflected Cross-Site Scripting XSS issue exists through the Briefcase module due to improper sanitization of file content by the OnlyOffice formatter. This occurs when the victim opens a crafted URL pointing to a shared folder...
Zimbra Collaboration Suite 安全漏洞
Zimbra Collaboration Suite ZCS is an open source collaboration suite from Zimbra. The product includes WebMail, Calendar, Address Book and more. A security vulnerability exists in Zimbra Collaboration Suite version 10.1 and prior versions, which stems from improper cleaning of file contents by th...
PT-2024-33662 · Snowflake · Snowflake Connector For Python
Name of the Vulnerable Software and Affected Versions: Snowflake Connector for Python versions prior to 3.12.3 Description: The issue concerns the logging of sensitive information by the Snowflake Connector for Python. When the logging level is set to DEBUG, the Connector may log Duo passcodes,...
Malicious code in @fdp-tools/eslint-formatter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5159c12014f3592f859dffa0d8c21b7f183b426a36d2de61f052cfa79fc5e809 The OpenSSF Package Analysis project identified '@fdp-tools/eslint-formatter' @ 0.0.14 npm as malicious. It is considered malicious because: - T...
MAL-2024-9105 Malicious code in @fdp-tools/eslint-formatter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5159c12014f3592f859dffa0d8c21b7f183b426a36d2de61f052cfa79fc5e809 The OpenSSF Package Analysis project identified '@fdp-tools/eslint-formatter' @ 0.0.14 npm as malicious. It is considered malicious because: - T...
Malicious code in formatter-test-package (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8ad808b5e90e246a93704f922e2dd59bf4c5954fdfc55ccf5371c6b13ac7483f The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...
Malicious code in doge_chef-formatter (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6869 Malicious code in doge_chef-formatter (RubyGems)
--- -= Per source details. Do not edit below this line.=-...