Malicious code in lc-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a284de978132b8c4d648fba52f9b1c5393d9988773103c1d56302dfe19cacf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-32371

Malicious code in lc-http npm...

MAL-2025-47905 Malicious code in lc-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a284de978132b8c4d648fba52f9b1c5393d9988773103c1d56302dfe19cacf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-58237

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Niaj Morshed LC Wizard ghl-wizard allows Stored XSS.This issue affects LC Wizard: from n/a through = 2.2.4...

WordPress LC Wizard plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin LC Wizard versions = 2.1.3...

CVE-2025-58237

CVE-2025-58237: LC Wizard (Connector Wizard) for WordPress has a stored XSS in LC Wizard/Connector Wizard up to version 1.4.0 (initial cites 1.3.0). Root cause: improper input neutralization during web page generation. Affected plugin: Connector Wizard (formerly LC Wizard); vulnerability context ...

CVE-2025-58237 WordPress LC Wizard plugin <= 2.2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Niaj Morshed LC Wizard ghl-wizard allows Stored XSS.This issue affects LC Wizard: from n/a through = 2.2.4...

CVE-2025-58237 WordPress LC Wizard plugin <= 2.2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Niaj Morshed LC Wizard ghl-wizard allows Stored XSS.This issue affects LC Wizard: from n/a through = 2.2.4...

PT-2025-38902

Name of the Vulnerable Software and Affected Versions LC Wizard versions through 1.3.0 Description The software contains a flaw related to improper input handling during web page creation, which can lead to Stored Cross-site Scripting XSS. This allows an attacker to inject malicious scripts into...

WordPress plugin LC Wizard 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

Malicious code in webteam-lc-template (npm)

The package webteam-lc-template was found to contain malicious code...

MAL-2025-39053 Malicious code in webteam-lc-template (npm)

The package webteam-lc-template was found to contain malicious code...

Malicious code in lc-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d918d66169ac2696569bb389d82b0b95640986fdc77ab8cec9639908d156d0c5 The OpenSSF Package Analysis project identified 'lc-config' @ 5.5.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8629 Malicious code in lc-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d918d66169ac2696569bb389d82b0b95640986fdc77ab8cec9639908d156d0c5 The OpenSSF Package Analysis project identified 'lc-config' @ 5.5.0 npm as malicious. It is considered malicious because: - The package...

hd-lc.de Improper Access Control vulnerability OBB-3767053

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Input validation

An Improper Release of Memory Before Removing Last Reference vulnerability in Packet Forwarding Engine PFE of Juniper Networks Junos OS allows a local, low privileged attacker to cause an FPC crash, leading to Denial of Service DoS. On all Junos MX Series with MPC1 - MPC9, LC480, LC2101, MX10003,...

lc-ps.org Cross Site Scripting vulnerability OBB-3566695

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lc-pravoved.ru Cross Site Scripting vulnerability OBB-3052096

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Intel Confirms Leak of Alder Lake BIOS Source Code

Chipmaker Intel has confirmed that proprietary source code related to its Alder Lake CPUs has been leaked, following its release by an unknown third-party on 4chan and GitHub last week. The published content contains Unified Extensible Firmware Interface UEFI code for Alder Lake, the company's 12...

CVE-2021-33903

In LCOS 10.40 to 10.42.0473-RU3 with SNMPv3 enabled on LANCOM devices, changing the password of the root user via the CLI does not change the password of the root user for SNMPv3 access. However, changing the password of the root user via LANconfig does change the password of the root user for...