Malicious code in morningstar-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18591ac1a5cb5ca3d11e07bde38f230dccc530bb4614d45f9be1f547677a2c9e On npm install, the package's preinstall lifecycle script runs wget against a hardcoded bare-IP HTTP endpoint, passing the output of id, pwd, hostnam...

MAL-2026-5449 Malicious code in morningstar-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18591ac1a5cb5ca3d11e07bde38f230dccc530bb4614d45f9be1f547677a2c9e On npm install, the package's preinstall lifecycle script runs wget against a hardcoded bare-IP HTTP endpoint, passing the output of id, pwd, hostnam...

EUVD-2018-8086

Malware in sbrugna...

37xDubai – Morningstar Ventures Launches NFT Art Gallery in Dubai

By Deeba Ahmed 37xDubai is established to promote Web3 technology and focus on Web-3-based education, digital/traditional art, and entertainment. This is a post from HackRead.com Read the original post: 37xDubai - Morningstar Ventures Launches NFT Art Gallery in Dubai...

CVE-2018-16234

MorningStar WhatWeb 0.4.9 has XSS via JSON report files...

Code injection

MorningStar WhatWeb 0.4.9 has XSS via JSON report files...

CVE-2018-16234

MorningStar WhatWeb 0.4.9 has XSS via JSON report files...

CVE-2018-16234

MorningStar WhatWeb 0.4.9 has XSS via JSON report files...

CVE-2018-16234

CVE-2018-16234 affects MorningStar WhatWeb 0.4.9, with a documented XSS vulnerability via JSON report files. The connected documents confirm the issue type but do not provide technical specifics on the exact root cause, vulnerable components, exploitation details, affected versions beyond 0.4.9, ...

CVE-2018-16234: Improper Neutralization of Input During Web Page Generation

MorningStar WhatWeb 0.4.9 has XSS via JSON report files...

PT-2018-13447

Name of the Vulnerable Software and Affected Versions MorningStar WhatWeb version 0.4.9 Description The issue is related to a security problem where MorningStar WhatWeb is affected by XSS via JSON report files. Recommendations For version 0.4.9, at the moment, there is no information about a newe...

msmedia.morningstar.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-531026 Description| Value ---|--- Affected Website:| msmedia.morningstar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

morningstar.com XSS vulnerability

Open Bug Bounty ID: OBB-511970 Description| Value ---|--- Affected Website:| morningstar.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

members.morningstar.com XSS vulnerability

Open Bug Bounty ID: OBB-453227 Description| Value ---|--- Affected Website:| members.morningstar.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

morningstar.com XSS vulnerability

Open Bug Bounty ID: OBB-407042 Description| Value ---|--- Affected Website:| morningstar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

morningstar.ekuriren.se Open Redirect vulnerability

Vulnerable URL: http://morningstar.ekuriren.se/Redirect.aspx?url=https://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 03.02.2017 Latest check for patch:| 03.02.2017 15:34 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

CuteNews and UTF-8 CuteNews - Multiple Vulnerabilities

CuteNews and UTF-8 CuteNews - Multiple Vulnerabilities MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Cute News and UTF-8 Cute News 1. Advisory Information...

CuteNews and UTF-8 CuteNews - Multiple Vulnerabilities

MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Cute News and UTF-8 Cute News 1. Advisory Information ------------------------------------------------------------------------------------------------------------------------ Title: Multiple security...

Open Auto Classifieds 1.5.9 SQL Injection

MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title: Multiple security issues in Open Auto Classifieds...

Open Auto Classifieds 1.5.9 File Upload

!/bin/bash File Upload exploit for Open Auto Classifieds version " echo "File upload proof of concept exploit for Open Auto Classifieds " evilimage.jpg.php echo "Registering user" curl -c cookiejar -d...