2503 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-36713
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross Site Scripting XSS vulnerability in the DataTables plug-in 1.9.2 for jQuery allows attackers to run arbitrary code via the sBaseName parameter to function...
Exploit for Cross-site Scripting in Jquery
Watchdog Tool Description ------------------------- Watchog is an integration of open source security tools aimed to provide a holistic security view for a given domain/IP. The way Watchdog is built, it can be used by product security teams, red teams and also by bug bounty hunters to get a 360°...
Malicious code in apachecn-jquery-zh-pt2 (npm)
The package apachecn-jquery-zh-pt2 was found to contain malicious code...
MAL-2025-43465 Malicious code in apachecn-jquery-zh-pt2 (npm)
The package apachecn-jquery-zh-pt2 was found to contain malicious code...
Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.
...
Linux Distros Unpatched Vulnerability : CVE-2022-23395
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS. CVE-2022-23395 Note that Nessus relies on the presence o...
Linux Distros Unpatched Vulnerability : CVE-2025-3573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a...
Linux Distros Unpatched Vulnerability : CVE-2022-31147
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jQuery Validation Plugin jquery-validation provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular...
Linux Distros Unpatched Vulnerability : CVE-2022-31160
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially...
Linux Distros Unpatched Vulnerability : CVE-2021-43306
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary...
Malicious code in xo-jquery-mask-plugin (npm)
The package xo-jquery-mask-plugin was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security f59460b8ba9281b320efd1888070928d3c31f86dd0770c7fe38d1f2eecc1e66b This package installs a dependency hosted on a custom domain that...
Malicious code in jquery-app-banner (npm)
The package jquery-app-banner was found to contain malicious code...
MAL-2025-31865 Malicious code in react-wt-jquery-and-css (npm)
The package react-wt-jquery-and-css was found to contain malicious code...
MAL-2025-23897 Malicious code in jquery-impromptu (npm)
The package jquery-impromptu was found to contain malicious code...
MAL-2025-23899 Malicious code in jquery-ui-i18n (npm)
The package jquery-ui-i18n was found to contain malicious code...
MAL-2025-23900 Malicious code in jquery-ui-slider-pips (npm)
The package jquery-ui-slider-pips was found to contain malicious code...
Malicious code in react-wt-jquery-and-css (npm)
The package react-wt-jquery-and-css was found to contain malicious code...
Malicious code in jquery-double-tap-to-go (npm)
The package jquery-double-tap-to-go was found to contain malicious code...