CVE-2024-27914

CVE-2024-27914: XSS reflejado en el modo depuración de GLPI Un usuario no autenticado puede proporcionar un enlace malicioso a un administrador de GLPI para explotar una vulnerabilidad de XSS reflejado. El XSS solo se activará si el administrador navega a través de la barra de depuración. Paquete...

Malware in @globalsearch/productstub

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @globalsearch/abstraction

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @globalsearch/abstraction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c271fedc45bc79b4a8271bea06418a439b10ad445df1c5ea1cc19fcf1dd377a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-986 Malicious code in @globalsearch/abstraction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c271fedc45bc79b4a8271bea06418a439b10ad445df1c5ea1cc19fcf1dd377a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-987 Malicious code in @globalsearch/productstub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1db9198ae58933fe0f3654bbd2ac62d4b6ec815cc26dfc7544a545c48f89864a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

openSUSE Security Update : MozillaThunderbird (openSUSE-2020-2133)

This update for MozillaThunderbird fixes the following issues : - Mozilla Thunderbird 78.4.2 MFSA 2020-49 bsc1178611 - CVE-2020-26950 bmo1675905 Write side effects in MCallGetProperty opcode not accounted for - Mozilla Thunderbird 78.4.1 - new: Thunderbird prompts for an address to use when...

globalsearch.11st.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-558862 Description| Value ---|--- Affected Website:| globalsearch.11st.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GlobalSearch CMS system.php parameter id SQL injection vulnerability

No description provided by source...

Unfixed XSS vulnerability at www.worldvitalrecords.com

Security researcher Uber0n, has submitted on 08/11/2007 a cross-site-scripting XSS vulnerability affecting www.worldvitalrecords.com, which at the time of submission ranked 86657 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is...