PT-2024-30924 · Cryoutcreations · Cryoutcreations Nirvana

Name of the Vulnerable Software and Affected Versions: CryoutCreations Nirvana versions 1.6.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, where an attacker can...

WordPress Nirvana theme <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Nirvana versions = 1.6.3...

WordPress Nirvana Theme <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)

Software Nirvana Type Theme Vulnerable versions = 1.6.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44057 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 363ddaac17ab Credits stealthcopter Required privilege Contributor...

Ex-Security Engineer Jailed 3 Years for $12.3 Million Crypto Exchange Thefts

A former security engineer has been sentenced to three years in prison in the U.S. for charges relating to hacking two decentralized cryptocurrency exchanges in July 2022 and stealing over $12.3 million. Shakeeb Ahmed, the defendant in question, pled guilty to one count of computer fraud in...

nirvanaapartments.gr Cross Site Scripting vulnerability OBB-3586417

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in nirvana-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56c15918eda59ba0f3eab8b18cebaa86284847edd4b74d8a8aab43deea503c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-625 Malicious code in nirvana-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56c15918eda59ba0f3eab8b18cebaa86284847edd4b74d8a8aab43deea503c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview nirvana-api is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

3 6 0 Nirvana team to assist Apple fixed the kernel vulnerability been publicly acknowledged-bug warning-the black bar safety net

Today, Apple released a new round of security bulletins, fixes by 360Nirvan Team found that the high-risk kernel vulnerability, vulnerability number CVE-2 0 1 6-4 5 8 2, the vulnerability affects OS X 10.11.6, iOS, 9.3.3, and watchOS 2.2.2 and tvOS 9.2.2 before version the multi-platform system,...

VLC Media Player 0.8.6a Unspecified Denial of Service Exploit

No description provided by source. print "-----------------------------------------------------------------------" print " VLC media player 0.8.6a Denial of Service" print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site: http://shinnai.altervista.org"...

WinFtp Server 2.0.2 (PASV) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== WinFtp Server 2.0.2 PASV Remote Denial of Service Exploit =========================================================== import sys,os,string import socket import struct import time print...

CVE-2001-0556

The Nirvana Editor NEdit 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on 1 backup files or 2 temporary files used when nedit prints a file or portions of a file...

CVE-2001-0556

The Nirvana Editor NEdit 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on 1 backup files or 2 temporary files used when nedit prints a file or portions of a file...