EUVD-2022-0535

Malicious code in bioql PyPI...

anti-xss

This is a PHP library called AntiXSS, which is designed to prevent cross-site scripting XSS attacks. The library provides a set of functions to sanitize user input and protect against XSS vulnerabilities. The library is maintained by Lars Moelleken and is available on Packagist, a popular PHP...

Linux Distros Unpatched Vulnerability : CVE-2022-24828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call VcsDriver::getFileContent can have a code injection...

Composer: Multiple Vulnerabilities

Background Composer is a dependency manager for the PHP programming language. Description Integrators using Composer code to call VcsDriver::getFileContent can have a code injection vulnerability if the user can control the $file or $identifier argument. This leads to a vulnerability on...

CVE-2022-0579

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...

CVE-2022-0692

Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1...

CVE-2022-0262

Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.7...

CVE-2022-0597

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0539

Cross-site Scripting XSS - Stored in Packagist ptrofimov/beanstalkconsole prior to 1.7.14...

CVE-2022-0678

Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0414

Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0...

CVE-2022-0612

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

CVE-2022-0505

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

BIT-DOLIBARR-2022-0414 Improper Validation of Specified Quantity in Input in dolibarr/dolibarr

Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0...

CVE-2022-0557

OS Command Injection in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0278

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0588

Missing Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0378

Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0558

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

PT-2024-40363 · Packagist · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A maliciously crafted URL can bypass the offsite redirection protection for BackURL parameters, potentially leading to users entering sensitive data on malicious websites instead of the...