2434 matches found
ROS-20251001-03
A vulnerability in the jQuery library exists due to insufficient cleansing of user-supplied data when passing elements to jQuery DOM methods. Exploitation of the vulnerability could allow an attacker, acting remotely, to perform cross-site scripting attacks...
Pentest
This repository is an offensive tool for web application exploitation, specifically a backdoor for web applications. It contains a JavaScript file check.js that is designed to be injected into a web page to steal user credentials. The tool uses the jQuery library jquery.cookie.min.js to manage...
WordPress jQuery Colorbox plugin <= 4.6.3 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Pierre Rudloff in WordPress Plugin jQuery Colorbox versions = 4.6.3...
CVE-2025-3650 jQuery Colorbox <= 4.6.3 - Contributor+ Stored XSS
The jQuery Colorbox WordPress plugin through 4.6.3 uses the colorbox library, which does not sanitize title attributes on links before using them, allowing users with at least the contributor role to conduct XSS attacks against administrators...
Linux Distros Unpatched Vulnerability : CVE-2021-36713
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross Site Scripting XSS vulnerability in the DataTables plug-in 1.9.2 for jQuery allows attackers to run arbitrary code via the sBaseName parameter to function...
Exploit for Cross-site Scripting in Jquery
Watchdog Tool Description ------------------------- Watchog is an integration of open source security tools aimed to provide a holistic security view for a given domain/IP. The way Watchdog is built, it can be used by product security teams, red teams and also by bug bounty hunters to get a 360°...
Malicious code in apachecn-jquery-zh-pt2 (npm)
The package apachecn-jquery-zh-pt2 was found to contain malicious code...
MAL-2025-43465 Malicious code in apachecn-jquery-zh-pt2 (npm)
The package apachecn-jquery-zh-pt2 was found to contain malicious code...
Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.
...
Linux Distros Unpatched Vulnerability : CVE-2022-23395
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS. CVE-2022-23395 Note that Nessus relies on the presence o...
Linux Distros Unpatched Vulnerability : CVE-2022-31160
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially...
Linux Distros Unpatched Vulnerability : CVE-2022-31147
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jQuery Validation Plugin jquery-validation provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular...
Linux Distros Unpatched Vulnerability : CVE-2021-43306
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary...
Linux Distros Unpatched Vulnerability : CVE-2025-3573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a...
Malicious code in jquery-impromptu (npm)
The package jquery-impromptu was found to contain malicious code...
Malicious code in jquery-poolparty (npm)
The package jquery-poolparty was found to contain malicious code...
Malicious code in jquery-double-tap-to-go (npm)
The package jquery-double-tap-to-go was found to contain malicious code...
@baosight/xinrong (>=0.0.36 <=0.0.37), wypulldom (=1.0.0) potentially affected by unknown CVE via jqeury (=0.0.1-security)
jqeury NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jqeury and may be impacted: - @baosight/xinrong =0.0.36, =0.0.37 - wypulldom =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23891...