MAL-2022-305 Malicious code in @gs-ux-uitoolkit-react/theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de95451355b7b46a650d357226215bd7cde93d64ec11e898dd20ae64776dc351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gs-ux-uitoolkit-react/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 051efde2a14110a62388a7b824ec4927bbffaf5e0f6f0ae9cc3b4638d1ecb0dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-302 Malicious code in @gs-ux-uitoolkit-react/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 051efde2a14110a62388a7b824ec4927bbffaf5e0f6f0ae9cc3b4638d1ecb0dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-303 Malicious code in @gs-ux-uitoolkit-react/select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5388b33525014b337227cc83d0fad7ff063ce76b9b1d21bcf8bfeffe45222a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-37021

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a null-dereference read crash. Technical details about the crash include the functions load glyph, gs fapi ft get char raster...

gs-ziegel.de Cross Site Scripting vulnerability OBB-2627889

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-36952

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as ref stack counttomark, zcounttomark, and gs interpret. No...

PT-2022-36939

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 2 crash type. The crash state involves gc trace, gs gc reclaim, and ireclaim. No information is provided...

WordPress GS Variation Swatches for WooCommerce plugin <= 1.5.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress GS Variation Swatches for WooCommerce plugin versions = 1.5.0. Solution Update the WordPress GS Variation Swatches for WooCommerce plugin to the latest available version at least 1.6.0...

PT-2022-36892

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details include a crash type of Stack-buffer-overflow WRITE 4, and the crash state involve...

gs-wersen.com Cross Site Scripting vulnerability OBB-2386961

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress WordPress Team Members – GS Plugins plugin <= 1.10.18 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WordPress Team Members – GS Plugins plugin versions = 1.10.18. Solution Update the WordPress WordPress Team Members – GS Plugins plugin to the latest available version at least 1.11.0...

WordPress WordPress Team Members – GS Plugins plugin <= 1.10.18 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Team Members – GS Plugins plugin versions = 1.10.18. Solution Update the WordPress WordPress Team Members – GS Plugins plugin to the latest available version at least 1.11.0...

PT-2022-36854

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a heap-buffer-overflow read crash. The crash state involves functions such as spgetcc, gs scan token, and gs interpret. No...

PT-2022-37314

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash. Technical details include the crash type being a Heap-buffer-overflow WRITE 16, and the crash state...

PT-2022-37233

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions, including get space object,...

PT-2022-37194

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash involves the pdfi cspace free callback, gs cspace final, and alloc restore step in function...

gs-ummeln.de Cross Site Scripting vulnerability OBB-2342774

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gs-orbit.de Cross Site Scripting vulnerability OBB-2325439

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gs-kirchdorf-amper.de Cross Site Scripting vulnerability OBB-2320297

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...