5563 matches found
Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials
Cybersecurity researchers have discovered a malicious package on the Python Package Index PyPI repository that targets Apple macOS systems with the goal of stealing users' Google Cloud credentials from a narrow pool of victims. The package, named "lr-utils-lib," attracted a total of 59 downloads...
ICEcoder vulnerable to Cross Site Scripting
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...
GHSA-XCR9-PM5W-GVH2 ICEcoder vulnerable to Cross Site Scripting
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...
ICEcoder vulnerable to Cross Site Scripting
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...
CVE-2024-41375
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...
CVE-2024-41374
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...
CVE-2024-41375
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...
CVE-2024-41373
ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php...
CVE-2024-41374
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...
CVE-2024-41373
ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php...
CVE-2024-41375
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...
CVE-2024-41373: Improper Limitation of a Pathname to a Restricted Directory
ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php...
CVE-2024-41374: Improper Neutralization of Input During Web Page Generation
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...
ICEcoder 安全漏洞
ICEcoder is a browser-based code editor from ICEcoder open source. Allows users to code online or offline directly in a web browser. A security vulnerability exists in ICEcoder version 8.1, which stems from a discovery via lib/settings-screen.php that contains a cross-site scripting vulnerability...
CVE-2024-41375
ICEcoder version 8.1 is vulnerable to a Cross-Site Scripting (XSS) flaw located in the lib/terminal-xhr.php file. This vulnerability allows for the potential execution of malicious scripts within the user's browser. While no specific patch version is currently documented, it is recommended to res...
CVE-2024-41375: Improper Neutralization of Input During Web Page Generation
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...
CVE-2024-41374
ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/settings-screen.php...
CVE-2024-41373
ICEcoder version 8.1 is susceptible to a Path Traversal vulnerability within the lib/backup-versions-preview-loader.php file. This flaw allows for improper limitation of a pathname to a restricted directory. As a remediation, it is recommended to restrict access to the affected file until a forma...
