EUVD-2021-7545

Malicious code in bioql PyPI...

EUVD-2022-4938

Malicious code in bioql PyPI...

EUVD-2022-1424

Malicious code in bioql PyPI...

EUVD-2022-34429

Malicious code in bioql PyPI...

EUVD-2025-13772

Malicious code in bioql PyPI...

EUVD-2024-22212

Malicious code in bioql PyPI...

EUVD-2023-0554

Malicious code in bioql PyPI...

EUVD-2025-14273

Malicious code in bioql PyPI...

ROS-20251001-03

A vulnerability in the jQuery library exists due to insufficient cleansing of user-supplied data when passing elements to jQuery DOM methods. Exploitation of the vulnerability could allow an attacker, acting remotely, to perform cross-site scripting attacks...

Pentest

This repository is an offensive tool for web application exploitation, specifically a backdoor for web applications. It contains a JavaScript file check.js that is designed to be injected into a web page to steal user credentials. The tool uses the jQuery library jquery.cookie.min.js to manage...

WordPress jQuery Colorbox plugin <= 4.6.3 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Pierre Rudloff in WordPress Plugin jQuery Colorbox versions = 4.6.3...

CVE-2025-3650 jQuery Colorbox <= 4.6.3 - Contributor+ Stored XSS

The jQuery Colorbox WordPress plugin through 4.6.3 uses the colorbox library, which does not sanitize title attributes on links before using them, allowing users with at least the contributor role to conduct XSS attacks against administrators...

CVE-2025-3650: Undefined Security Weakness

The jQuery Colorbox WordPress plugin through 4.6.3 uses the colorbox library, which does not sanitize title attributes on links before using them, allowing users with at least the contributor role to conduct XSS attacks against administrators...

Linux Distros Unpatched Vulnerability : CVE-2021-36713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross Site Scripting XSS vulnerability in the DataTables plug-in 1.9.2 for jQuery allows attackers to run arbitrary code via the sBaseName parameter to function...

Exploit for Cross-site Scripting in Jquery

Watchdog Tool Description ------------------------- Watchog is an integration of open source security tools aimed to provide a holistic security view for a given domain/IP. The way Watchdog is built, it can be used by product security teams, red teams and also by bug bounty hunters to get a 360°...

Malicious code in apachecn-jquery-zh-pt2 (npm)

The package apachecn-jquery-zh-pt2 was found to contain malicious code...

MAL-2025-43465 Malicious code in apachecn-jquery-zh-pt2 (npm)

The package apachecn-jquery-zh-pt2 was found to contain malicious code...

Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.

...

Linux Distros Unpatched Vulnerability : CVE-2022-23395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS. CVE-2022-23395 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2022-31160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially...