CVE-2024-23331

Vite is a frontend tooling framework for javascript. The Vite dev server option server.fs.deny can be bypassed on case-insensitive file systems using case-augmented versions of filenames. Notably this affects servers hosted on Windows. This bypass is similar to CVE-2023-34092 -- with surface area...

Design/Logic Flaw

Vite is a website frontend framework. When Vite's HTML transformation is invoked manually via server.transformIndexHtml, the original request URL is passed in unmodified, and the html being transformed contains inline module scripts ..., it is possible to inject arbitrary HTML into the transforme...

CVE-2023-25572 React-Admin vulnerable to Cross-Site-Scripting attack on `<RichTextField>`

react-admin is a frontend framework for building browser applications on top of REST/GraphQL APIs. react-admin prior to versions 3.19.12 and 4.7.6, along with ra-ui-materialui prior to 3.19.12 and 4.7.6, are vulnerable to cross-site scripting. All React applications built with react-admin and usi...

Malicious code in frontend-framework-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3249f5205a1b92d8e4fa170c1209732d6d43bcf2a5b6681aa3176e38a4c358cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3221 Malicious code in frontend-framework-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3249f5205a1b92d8e4fa170c1209732d6d43bcf2a5b6681aa3176e38a4c358cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XSS Vulnerability in Heybbs Micro Community

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs Micro Community has an XSS vulnerability that can be exploited by attackers to obtain administrator cookies...

Sitadel - Web Application Security Scanner

Sitadel is basically an update for WAScan making it compatible for python = 3.4 It allows more flexibility for you to write new modules and implement new features : Frontend framework detection Content Delivery Network detection Define Risk Level to allow for scans Plugin system Docker image...