1867 matches found
Malicious code in rest-icon-orchestrator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21efc3fdff6697baee6fe3ec8b62837d3ee9fa549ec7fc39595559ab5691f3fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2005-1655
AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service client crash via an invalid smiley icon location in the sml parameter of a font tag...
IconEnvironmentDataBlock - Windows LNK File Special UNC Path NTLM Leak
This module creates a malicious Windows shortcut LNK file that specifies a special UNC path in IconEnvironmentDataBlock of Shell Link .LNK that can trigger an authentication attempt to a remote server. This can be used to harvest NTLM authentication credentials. When a victim browse to the locati...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the iconURL parameter in the marketplace-app-manager-web module. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwise truste...
CVE-2025-46335 Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. A Stored Cross-Site Scripting XSS vulnerability has been identified in MobSF versions up to and including 4.3.2. The vulnerability arises from improper sanitization of...
Cross-site Scripting (XSS)
Overview mobsf is a Mobile Security Framework MobSF is an automated, all-in-one mobile application Android/iOS/Windows pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Affected versions of this package are vulnerable to Cross-site...
Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
Vulnerable MobSF Versions: .svg This file becomes publicly accessible via the web interface at: http://127.0.0.1:8081/download/filename.svg If the SVG contains embedded JavaScript e.g., an XSS payload, accessing this URL via a browser leads to the execution of the script in the context of the Mob...
Microsoft Edge taskbar icon may not appear when it is launched through Local App Access
When Microsoft Edge is launched in an ICA desktop session through Local App Access LAA, Microsoft Edge icon may not appear in Windows taskbar of the session. In the situation, if end user makes a mouse click on the background Windows desktop in the session, the foreground Microsoft Edge window wi...
CVE-2025-32548
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in borisolhor Hamburger Icon Menu Lite allows Reflected XSS. This issue affects Hamburger Icon Menu Lite: from n/a through 1.0...
Malicious code in @sporta-technology/d11-web-components.table-cells.tc-icon-list (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.table-cells.tc-icon-button (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.table-cells.tc-icon (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.icon-element (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3333 Malicious code in @sporta-technology/d11-web-components.icon-button (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.icon-button (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.icon (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-3457
The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'oceanwpicon' shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-32548
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in borisolhor Hamburger Icon Menu Lite allows Reflected XSS. This issue affects Hamburger Icon Menu Lite: from n/a through 1.0...
CVE-2025-32548
CVE-2025-32548 describes a Reflected XSS in the WordPress plugin “Hamburger Icon Menu Lite,” caused by improper input neutralization during web page generation. The vulnerability affects the plugin as released up to version 1.0 (listed as affected “from n/a through 1.0”). The initial documents co...
CVE-2025-32548 WordPress Hamburger Icon Menu Lite Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in borisolhor Hamburger Icon Menu Lite allows Reflected XSS. This issue affects Hamburger Icon Menu Lite: from n/a through 1.0...