EUVD-2019-0341

Malware in sbrugna...

Stored cross-site scripting vulnerability in hybbs frontend fr***.js file

hybbs is a PHP web program that supports plugin extensions and template extensions. A stored cross-site scripting vulnerability exists in the frontend fr.js file of hybbs. Attackers can use the vulnerability to obtain sensitive information such as user cookies...

CVE-2016-10638

js-given is a JavaScript frontend to jgiven. js-given downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the network o...

CVE-2016-10638

js-given is a JavaScript frontend to jgiven. js-given downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the network o...