320 matches found
Exploit-Medium-CVE-2021-41184
Exploit-Medium-CVE-2021-41184 利用 Medium CVE-2021-41184 在 .position 工具的 of 选项中的 XSS 1. jQuery UI 版本 v1.12.1 存在漏洞 1.1 https://www.website.com/js/jquery/jquery-ui-1.12.1/jquery-ui.min.js...
jquery-cve-2022-31160
jQuery UI CVE-2022-31160 Vulnerability Demonstration This project demonstrates the jQuery UI Checkboxradio Widget Refresh Vulnerability CVE-2022-31160 , which allows HTML entity decoding during widget refresh operations, potentially leading to Cross-Site Scripting XSS attacks. 🚨 Security Warning ...
CVE-2020-28488
CVE-2020-28488 サービス拒否（DoS）- jQuery UI 1.12.1 - エクスプロイト ペイロード for var i = 0; i DoS - jQuery UI 1.12.1 DoS - jQuery UI 1.12.1 Exploit PoC by Rafael Cintra Lopes function exploit for var i = 0; i 参考リンク CVE-2020-28488 Snyk jQuery UI レポート...
CLEANSTART-2024-EC59064 Cross-site scripting (XSS) vulnerability in jQuery UI before 1
Security vulnerability affects the drupal7 package. Cross-site scripting XSS vulnerability in jQuery UI before 1...
CLEANSTART-2024-ND69835 jQuery-UI is the official jQuery user interface library
Security vulnerability affects the drupal7 package. jQuery-UI is the official jQuery user interface library...
Astra Linux – Vulnerability in jqueryui
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the of option of the .position utility from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. Any string value passed to the of option is now treat...
Astra Linux – Vulnerability in jqueryui
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now treated as a CSS...
Malicious code in jquery.ui.tabs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50fc48e6d03705244cf78a2f2ee23c6ffe5a91a64f98d23d6a31f94557bf0d84 [email protected] is a dependency-confusion squat: it is published at version 9999.0.0 with an empty runtime index.js contains only...
Malicious code in jquery.ui.core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5bc94d3ac40b31064d4dad8125dc959fdc3559785cdbeb03de2cc16c147ac Package is a dependency-confusion squat on the jquery.ui.core name published at version 9999.0.0. The main entry index.js is empty module.exports = ;...
MiracleLinux 4 : ipa-3.0.0-47.0.1.AXS4 (AXSA:2015-419:01)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-419:01 advisory. IPA is an integrated solution to provide centrally managed Identity machine, user, virtual machines, groups, authentication credentials, Policy...
HP LaserJet Printers Improper Neutralization of Input During Web Page Generation (CVE-2021-41183)
Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to denial of service due to WS-Print request and potential injections of Cross Site Scripting via jQuery-UI. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...
TencentOS Server 4: python-XStatic-jquery-ui (TSSA-2025:0080)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0080 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Malicious Package
Overview jquery-ui-source is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-35950
Malicious code in jquery-ui-source npm...
MAL-2025-48608 Malicious code in jquery-ui-source (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6feb40c9d7a44c987c085d658198139fcdd2fdf8b0000dab67f486d3271a036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in jquery-ui-source (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6feb40c9d7a44c987c085d658198139fcdd2fdf8b0000dab67f486d3271a036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2017-0323
Malware in sbrugna...
EUVD-2017-0292
Malware in sbrugna...