Malicious code in library-explorer (npm)

Source: amazon-inspector 28b5db05b3bdfb9cc8b1af9759f05a3bc7a1b6a9c364b86831b93df78e9e2273 package.json declares preinstall: node index.js. On npm install, index.js collects installer host identity os.hostname, os.platform, os.arch, os.homedir, os.userInfo username/uid/gid/shell, CPU/memory and...

EUVD-2019-16959

Malware in sbrugna...

CVE-2019-7417: Improper Neutralization of Input During Web Page Generation

XSS exists in Ericsson Active Library Explorer ALEX 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter...

PT-2019-18591

Name of the Vulnerable Software and Affected Versions Ericsson Active Library Explorer ALEX version 14.3 Description A security issue exists in the software, where an XSS issue is present in multiple parameters of the "/cgi-bin/alexserv" servlet. The affected parameters include DB, FN, fn, and id...

Multiple Cross-Site Scripting Vulnerabilities in Ericsson Active Library Explorer

Ericsson Active Library Explorer is server-based software that allows users to browse Ericsson document libraries and documents using a standard Web browser. Ericsson Active Library Explorer has multiple cross-site scripting vulnerabilities. Due to the program failing to adequately filter...

Ericsson Active Library Explorer (ALEX) 14.3 Cross Site Scripting

!-- Exploit Title: Cross Site Scripting in Ericsson Active Library Explorer Server Version 14.3 Date: 23-01-2019 Exploit Author: Rafael Pedrero Vendor Homepage: http://www.ericsson.com Software Link: http://www.ericsson.com Version: Ericsson Active Library Explorer Server Version 14.3 Tested on:...