WS-2019-0389

Angular-location-update, version 0.0.3 contains malicious code that gets executed in the browser and enumerates password, cvc and cardnumber fields from forms and sends the extracted values to "hps://js-metrics.com/minjs.php?pl="...

PT-2020-20973

Name of the Vulnerable Software and Affected Versions ng-ui-library version 1.0.987 Description The issue concerns malicious code in the ng-ui-library that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This extracted data i...

PT-2020-21072

Name of the Vulnerable Software and Affected Versions precode.js version 1.1.1 Description The issue concerns malicious code in the specified version of precode.js, which when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This...

PT-2020-21199

Name of the Vulnerable Software and Affected Versions grunt-radic version 0.1.1 Description The issue concerns malicious code in a specific version of the software. When executed in the browser, this code enumerates password, cvc, and cardnumber fields from forms and sends the extracted values to...

PT-2020-21230

Name of the Vulnerable Software and Affected Versions github-jquery-widgets version 0.1.2 Description The issue concerns malicious code in version 0.1.2 of github-jquery-widgets. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends the extract...

PT-2020-21431

Name of the Vulnerable Software and Affected Versions scroool version 0.1.7 Description The issue concerns malicious code in version 0.1.7 of scroool that, when executed in a browser, extracts sensitive information such as password, cvc, and cardnumber fields from forms and sends this data to the...

PT-2020-21420

Name of the Vulnerable Software and Affected Versions geoheat version 1.3.2 Description The issue concerns malicious code in version 1.3.2 of geoheat. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends the extracted values to the...

PT-2020-21042

Name of the Vulnerable Software and Affected Versions angular-location-update version 0.0.3 Description The issue concerns malicious code in version 0.0.3 of angular-location-update. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends the...

PT-2020-20952

Name of the Vulnerable Software and Affected Versions ember-power-timepicker version 1.0.8 Description The issue concerns malicious code in the ember-power-timepicker package that, when executed in a browser, can extract sensitive information such as password, cvc, and card number fields from...

PT-2020-21356

Name of the Vulnerable Software and Affected Versions pensi-scheduler version 1.1.3 Description The issue concerns malicious code in the pensi-scheduler package that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This...

PT-2020-21508

Name of the Vulnerable Software and Affected Versions pyramid-proportion version 1.0.5 Description The issue concerns malicious code in version 1.0.5 of the pyramid-proportion package. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from for...

PT-2020-21050

Name of the Vulnerable Software and Affected Versions device-mqtt version 1.0.11 Description The issue concerns malicious code in version 1.0.11 of the device-mqtt package. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends...

PT-2020-21124

Name of the Vulnerable Software and Affected Versions jquery-airload version 0.2.5 Description The issue concerns malicious code in version 0.2.5 of jquery-airload. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the...

PT-2020-21142

Name of the Vulnerable Software and Affected Versions pm-controls version 1.1.8 Description The issue concerns malicious code in a specific version of the software, which, when executed in a browser, can extract sensitive information such as password, cvc, and card number fields from forms. This...

PT-2020-21392

Name of the Vulnerable Software and Affected Versions sailclothjs version 1.2.6 Description The issue concerns malicious code in sailclothjs that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This extracted data is then sen...

PT-2020-21052

Name of the Vulnerable Software and Affected Versions radicjs version 0.2.1 Description The issue concerns malicious code in version 0.2.1 of radicjs that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This extracted data is...

PT-2020-21048

Name of the Vulnerable Software and Affected Versions vue-backbone version 0.1.2 Description The issue concerns malicious code in version 0.1.2 of vue-backbone. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends the extracted values to the...

PT-2020-21370

Name of the Vulnerable Software and Affected Versions iie-viz version 1.0.4 Description The issue concerns malicious code in version 1.0.4 of the iie-viz package. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the...

PT-2020-21019

Name of the Vulnerable Software and Affected Versions slush-fullstack-framework version 0.9.2 Description The issue concerns malicious code in version 0.9.2 of the software. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and send...

PT-2020-21359

Name of the Vulnerable Software and Affected Versions jekyll-for-github-projects version 0.2.12 Description The issue concerns malicious code in version 0.2.12 of jekyll-for-github-projects. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends...