Malicious code in hydrogen-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62359364101bca3a55c77d57dcf377cd0bad17b716447cc06c3d7a2a72ed898c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3736 Malicious code in hydrogen-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62359364101bca3a55c77d57dcf377cd0bad17b716447cc06c3d7a2a72ed898c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hydrogen-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c990881f1898c54cc7d2c7a7fb78c754424e170a34ffa878a0a6f437f6468b32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3735 Malicious code in hydrogen-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c990881f1898c54cc7d2c7a7fb78c754424e170a34ffa878a0a6f437f6468b32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-6J22-WV8G-894F Potential Cross-site Scripting vulnerability in Hydrogen

Impact There is a potential Cross-Site Scripting XSS vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects all versions of Hydrogen starting from version 0.10.0 to 0.18.0. This vulnerability is exploitable in applications whose...

Potential Cross-site Scripting vulnerability in Hydrogen

Impact There is a potential Cross-Site Scripting XSS vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects all versions of Hydrogen starting from version 0.10.0 to 0.18.0. This vulnerability is exploitable in applications whose...

Cross-site Scripting (XSS)

@shopify/hydrogen is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript through the renderHydrogen function of entry-server.js when the application is built with hydrogen...

CVE-2022-29230

Hydrogen is a React-based framework for building dynamic, Shopify-powered custom storefronts. There is a potential Cross-Site Scripting XSS vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects all versions of Hydrogen starting from...

Cross site scripting

Hydrogen is a React-based framework for building dynamic, Shopify-powered custom storefronts. There is a potential Cross-Site Scripting XSS vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects all versions of Hydrogen starting from...

CVE-2022-29230 Potential cross-site scripting (XSS) vulnerability in Hydrogen

Hydrogen is a React-based framework for building dynamic, Shopify-powered custom storefronts. There is a potential Cross-Site Scripting XSS vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects all versions of Hydrogen starting from...

CVE-2022-29230 Potential cross-site scripting (XSS) vulnerability in Hydrogen

Hydrogen is a React-based framework for building dynamic, Shopify-powered custom storefronts. There is a potential Cross-Site Scripting XSS vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects all versions of Hydrogen starting from...

CVE-2022-29230

Hydrogen (Shopify) has a reported Cross-Site Scripting (XSS) vulnerability affecting version range 0.10.0 to 0.18.0, exploitable when hydrating data is user-controlled. The issue may allow an arbitrary script to run in pages built with Hydrogen. A fix is available: upgrade to v0.19.0; CSP is not ...

Hydrogen 跨站脚本漏洞

Hydrogen is a React-based framework for Shopify individual developers. It is used to build dynamic, custom storefronts powered by Shopify. A cross-site scripting vulnerability exists in Hydrogen versions 0.10.0 through 0.18.0, which can be exploited by an attacker to execute script on pages built...

hydrogenfuelsystems.com.au Cross Site Scripting vulnerability OBB-1483184

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2019-2097

In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from a malicious proxy configuration, with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...

CVE-2019-2097

In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from a malicious proxy configuration, with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...

Hydrogen Krypton Travel App for Android has logic design flaws

Hydrogen Krypton Travel APP is a comprehensive service platform in the field of new energy vehicles. Hydrogen Krypton Mobility APP for Android has a logical design vulnerability that allows an attacker to log in to any user account by means of a cell phone number and brute force breaking of the...

Apple to build Fuel Cell Battery that Could Power iPhones and Macbooks for Weeks

Nothing could be scarier than that little battery icon in our smart hits the red. All our focus shifts towards searching the nearest charging outlet – and it happens all too often. Yes, the short battery life is the worst thing about our smartphones. It forces us to always carry chargers and...

The vulnerability of Google Chrome browser allows a malicious intruder to trigger a service denial or otherwise affect the system.

The vulnerability of Google Chrome’s browser in the ReduceTransitionElementsKind function of the hydrogen-check-elimination.cc Google V8 library means that an attacker who operates remotely can cause a service failure or otherwise affect the system by using specially crafted JavaScript code that...

Google Chrome V8 Type Obfuscation Vulnerability (CNVD-2015-02614)

Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in the 'ReduceTransitionElementsKind' function in the hydrogen-check-elimination.cc file of Google V8 before 4.2.77.8 used in versions of Google Chrome before 42.0.2311.90. ' function has a security...