TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2022-004)

TYPO3 is prone to a cross-site scripting XSS vulnerability in the Frontend Login Mailer. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TYPO3-CORE-SA-2022-004: Cross-Site Scripting in Frontend Login Mailer

More info at https://typo3.org/security/advisory/typo3-core-sa-2022-004...

TYPO3-CORE-SA-2022-004: Cross-Site Scripting in Frontend Login Mailer

More info at https://typo3.org/security/advisory/typo3-core-sa-2022-004...

WordPress plugin Google Tag Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2022-3505 · Elementor · Elementor Website Builder

Name of the Vulnerable Software and Affected Versions: Elementor Website Builder plugin versions prior to 3.5.6 Description: The issue is related to insufficient protection of the webpage structure, allowing a remote attacker to perform cross-site scripting. This is a DOM-based Reflected Cross-Si...

Malicious code in jira-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78600b96da64ce05b13bb5f2b89c1fc3458eea5abaad43f36d2784cb8926d938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4032 Malicious code in jira-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78600b96da64ce05b13bb5f2b89c1fc3458eea5abaad43f36d2784cb8926d938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6986 Malicious code in vt-blockchain-bootcamp-starter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1085597e357b5b1d2b12ab109ff9c279fa1cbca538e418cf962f34265384141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flipper-frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 745d70c1af1c5bc8882038e6eac687fd4ce85fa2d6b667c7c5ccef39ce54b877 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

flipper-server (>=0.171.1, <=0.212.0), flipper-server-companion (>=0.171.0, <=0.212.0) +1 more potentially affected by unknown CVE via flipper-frontend-core (>=0.171.0, <=0.212.0)

flipper-frontend-core NPM version =0.171.0, =0.171.1, =0.171.0, =0.171.1, =0.212.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-3074...

Malicious code in @logistics-frontend/hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a43e1ab76807eb59ac7f06d2c1ee7b9920fb053f9adb42e497819518dc71266 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-395 Malicious code in @logistics-frontend/ndd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware affdd33b3ef985c7a2234ece7c7196fe737cc2a6bf9262d955b9ac46d7b57222 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-397 Malicious code in @logistics-frontend/types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 917015e67d3524947bf6202269dd9d3b5ce19a12c03609c67b0c04073720abdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-394 Malicious code in @logistics-frontend/modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4cfb4ef58af701fde6a6535d9f669a870e7ef44606fb659eba4368fb835340a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @logistics-frontend/ndd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware affdd33b3ef985c7a2234ece7c7196fe737cc2a6bf9262d955b9ac46d7b57222 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @logistics-frontend/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1071ed352739aa34ab8907b99ce3d1e2e3127a96d8d63b155f3830fd9d8b44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @logistics-frontend/types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 917015e67d3524947bf6202269dd9d3b5ce19a12c03609c67b0c04073720abdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @logistics-frontend/modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4cfb4ef58af701fde6a6535d9f669a870e7ef44606fb659eba4368fb835340a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-396 Malicious code in @logistics-frontend/polyfills (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f64b2f1ddf3127537e8c1840e3435d7ff1cbe9db0ed322bcf357600faace765 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @logistics-frontend/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2c617a6d61a62b6cadd5b810e4ef2ff8ab74e499dfe400bd5294f7b88e2a09c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...