CVE-2018-9426

In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This could lead to crypto vulnerability with no additional execution privileges needed. User interaction is not needed for exploitation. Bulletin...

PT-2024-10687 · Unknown · Rsakeypairgenerator

Name of the Vulnerable Software and Affected Versions: RSAKeyPairGenerator affected versions not specified Description: An incorrect implementation in RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java could cause the generation of weak RSA key pairs. This could lead to a cryp...

Malicious code in tailchat-service-swagger-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf09d7e9f52a0406ff87b349906e6278f766537755abbd90395b2179ccd36fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailchat-service-openapi-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22511b2b576ee7a41e7c7f6abf4e9a9fdedded65c99367d47f3f5cda4ce875c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11366

The SEO Landing Page Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.66.2. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-11366 SEO Landing Page Generator <= 1.66.2 - Reflected Cross-Site Scripting

The SEO Landing Page Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.66.2. This makes it possible for unauthenticated attackers to inject arbitrary web...

PT-2024-16938 · WordPress · Seo Landing Page Generator

Name of the Vulnerable Software and Affected Versions: SEO Landing Page Generator plugin for WordPress versions up to, and including, 1.66.2 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without proper escaping on the URL. This allows...

WordPress Plugin SEO Landing Page Generator Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin SEO Landin...

CVE-2024-11366: Improper Neutralization of Input During Web Page Generation

The SEO Landing Page Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.66.2. This makes it possible for unauthenticated attackers to inject arbitrary web...

WordPress SEO Landing Page Generator plugin <= 1.66.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin SEO Landing Page Generator versions = 1.66.2...

Malicious code in test-generator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07e14a996fe338bdf1114d3b98c7854b3d68b3e44ce835139b810ba1f5be6f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11011 Malicious code in test-generator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07e14a996fe338bdf1114d3b98c7854b3d68b3e44ce835139b810ba1f5be6f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in test-generator-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

dev.sigstore:sigstore-maven-plugin (1.0.0), org.apache.maven.resolver:maven-resolver-generator-sigstore (>=2.0.2, <=2.0.4) +1 more potentially affected by CVE-2024-53267 via dev.sigstore:sigstore-java (1.0.0)

dev.sigstore:sigstore-java MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.sigstore:sigstore-java and may be impacted: - dev.sigstore:sigstore-maven-plugin 1.0.0 - org.apache.maven.resolver:maven-resolver-generator-sigstore...

dev.sigstore:sigstore-maven-plugin (1.0.0), org.apache.maven.resolver:maven-resolver-generator-sigstore (>=2.0.2, <=2.0.4) +1 more potentially affected by CVE-2024-53267 via dev.sigstore:sigstore-java (1.0.0)

dev.sigstore:sigstore-java MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.sigstore:sigstore-java and may be impacted: - dev.sigstore:sigstore-maven-plugin 1.0.0 - org.apache.maven.resolver:maven-resolver-generator-sigstore...

dev.sigstore:sigstore-maven-plugin (1.0.0), org.apache.maven.resolver:maven-resolver-generator-sigstore (>=2.0.2, <=2.0.4) +1 more potentially affected by CVE-2024-53267 via dev.sigstore:sigstore-java (1.0.0)

dev.sigstore:sigstore-java MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.sigstore:sigstore-java and may be impacted: - dev.sigstore:sigstore-maven-plugin 1.0.0 - org.apache.maven.resolver:maven-resolver-generator-sigstore...

CVE-2024-32468 Improper neutralization of input during web page generation ("Cross-site Scripting") in deno_doc HTML generator

Deno is a runtime for JavaScript and TypeScript written in rust. Several cross-site scripting vulnerabilities existed in the denodoc crate which lead to Self-XSS with deno doc --html. 1. XSS in generated searchindex.js, denodoc outputs a JavaScript file for searching. However, the generated file...

CVE-2024-32468 Improper neutralization of input during web page generation ("Cross-site Scripting") in deno_doc HTML generator

Deno is a runtime for JavaScript and TypeScript written in rust. Several cross-site scripting vulnerabilities existed in the denodoc crate which lead to Self-XSS with deno doc --html. 1. XSS in generated searchindex.js, denodoc outputs a JavaScript file for searching. However, the generated file...

CVE-2024-11361: Improper Neutralization of Input During Web Page Generation

The PDF Invoices & Packing Slips Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers t...

WordPress PDF Invoices & Packing Slips Generator for WooCommerce plugin <= 2.2.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin PDF Invoices & Packing Slips Generator for WooCommerce versions = 2.2.1...