168 matches found
Malicious code in i-just-love-bananas-dont-mind (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23aa7188231dd22eb43f4fbc309dbeec0c8d18b512111786fb8e61c70e65b993 The OpenSSF Package Analysis project identified 'i-just-love-bananas-dont-mind' @ 1.0.2 npm as malicious. It is considered malicious because: -...
Towards Understanding the Cognitive Habits of Large Reasoning Models
Large Reasoning Models LRMs, which autonomously produce a reasoning Chain of Thought CoT before producing final responses, offer a promising approach to interpreting and monitoring model behaviors. Inspired by the observation that certain CoT patterns -- e.g., "Wait, did I miss anything?'' --...
CVE-2025-22544
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mind Doodle Mind Doodle Visual Sitemaps & Tasks mind-doodle-sitemap allows Stored XSS.This issue affects Mind Doodle Visual Sitemaps & Tasks: from n/a through = 1.6...
CVE-2022-36677
Obsidian Mind Map v1.1.0 allows attackers to execute arbitrary code via a crafted payload injected into an uploaded document...
CVE-2021-32851
Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...
Malicious code in mind-meeting-assistant2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b5bc9454b761cdb738911b2168c5dae8d0507092d78f8112f71e1e9583957cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2618 Malicious code in mind-meeting-assistant2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b5bc9454b761cdb738911b2168c5dae8d0507092d78f8112f71e1e9583957cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-22544
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mind Doodle Mind Doodle Visual Sitemaps & Tasks mind-doodle-sitemap allows Stored XSS.This issue affects Mind Doodle Visual Sitemaps & Tasks: from n/a through = 1.6...
CVE-2025-22544 WordPress Mind Doodle Visual Sitemaps & Tasks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mind Doodle Mind Doodle Visual Sitemaps & Tasks mind-doodle-sitemap allows Stored XSS.This issue affects Mind Doodle Visual Sitemaps & Tasks: from n/a through = 1.6...
CVE-2025-22544 WordPress Mind Doodle Visual Sitemaps & Tasks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mind Doodle Mind Doodle Visual Sitemaps & Tasks allows Stored XSS.This issue affects Mind Doodle Visual Sitemaps & Tasks: from n/a through 1.6...
CVE-2025-22544
The CVE-2025-22544 entry concerns Mind Doodle Visual Sitemaps & Tasks. It is a Stored Cross-Site Scripting vulnerability arising from improper neutralization of input during web page generation, affecting Mind Doodle Visual Sitemaps & Tasks versions up to 1.6. Current connected references (Wordfe...
WordPress Mind Doodle Visual Sitemaps & Tasks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Mind Doodle Visual Sitemaps & Tasks versions = 1.6...
PT-2025-4535 · Unknown · Mind Doodle Visual Sitemaps & Tasks
Name of the Vulnerable Software and Affected Versions: Mind Doodle Visual Sitemaps & Tasks versions 1.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS attacks...
WordPress plugin Mind Doodle Visual Sitemaps & Tasks 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-22544: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mind Doodle Mind Doodle Visual Sitemaps & Tasks mind-doodle-sitemap allows Stored XSS.This issue affects Mind Doodle Visual Sitemaps & Tasks: from n/a through = 1.6...
Efficient Document Merging Strategies for Professionals
By Uzair Amir Discover time-saving document merging strategies for professionals. Learn how to streamline workflows, enhance collaboration, and protect document integrity for increased productivity and peace of mind. This is a post from HackRead.com Read the original post: Efficient Document...
youngmindcenter.org Cross Site Scripting vulnerability OBB-3903370
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-36677
Obsidian Mind Map v1.1.0 allows attackers to execute arbitrary code via a crafted payload injected into an uploaded document...
