Malicious code in lew (npm)

The package lew was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in lew (npm)

The package lew was found to contain malicious code...

MAL-2025-25211 Malicious code in lew (npm)

The package lew was found to contain malicious code...

CVE-2024-49661

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lew Ayotte leenk.me leenkme allows Reflected XSS.This issue affects leenk.me: from n/a through = 2.16.0...

CVE-2024-49661

CVE-2024-49661 is a Reflected XSS vulnerability in the WordPress plugin leenk.me (versions n/a–2.16.0). The issue is due to improper input handling during web page generation and affects leenk.me up to 2.16.0. It was documented with explicit details by Patchstack noting the vulnerable plugin and ...

CVE-2024-49661 WordPress leenk.me plugin <= 2.16.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lew Ayotte leenk.me leenkme allows Reflected XSS.This issue affects leenk.me: from n/a through = 2.16.0...

lew-automotive.com Cross Site Scripting vulnerability OBB-2962559

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Backup Buddy plugin 8.5.8.0 - 8.7.4.1 - Unauthenticated Path Traversal / Arbitrary File Download vulnerability

Unauthenticated Path Traversal / Arbitrary File Download vulnerability discovered by Lew Ayotte & Timothy Jacobs in WordPress Backup Buddy plugin versions 8.5.8.0 - 8.7.4.1. Solution Update the WordPress BackupBuddy plugin to the latest available version at least 8.7.5.0...