Malicious code in fca-bucu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2908145aa0c6daa50e572b3120bf06a85fcc270fc0cdf0733af4bf1e624bf0da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1f4a4a3a36da800a3c6e33fb47a4a42edf9ec19c39db7d5ea4e52a8fb378d12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

STORED XSS in Journal-> Sections

Description Stored attacks are those where the injected script is permanently stored on the target servers, such as in a database, in a message forum, visitor log, comment field, etc. The victim then retrieves the malicious script from the server when it requests the stored information. Stored XS...

CISA, FBI, and CNMF Release Advisory on Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475

Today, CISA, Federal Bureau of Investigation FBI, and U.S. Cyber Command’s Cyber National Mission Force CNMF published a joint Cybersecurity Advisory CSA, Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475. This CSA provides information on an incident at an Aeronautical...

PT-2023-5296 · Unknown · Mod3Gp-Sy-120K

Name of the Vulnerable Software and Affected Versions: MOD3GP-SY-120K affected versions not specified Description: The web application of MOD3GP-SY-120K contains a persistent cross-site scripting XSS issue. This allows an authenticated remote attacker to inject an XSS payload into the MAIL RCV...

CVE-2023-34357: Weak Password Recovery Mechanism for Forgotten Password

Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will remain valid after the password has been reset and after the expected expiration date. An attacker with access to the browser history or has...

CVE-2023-41107

TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting XSSattack...

Cross site scripting

TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting XSSattack...

CVE-2023-41107

TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting XSSattack...

PT-2023-27791

Name of the Vulnerable Software and Affected Versions TEF portal version 2023-07-17 Description The issue is related to a persistent cross-site scripting XSS attack. This type of attack involves injecting malicious scripts into a website, which are then executed by the user's browser, potentially...

CVE-2023-41107: Improper Neutralization of Input During Web Page Generation

TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting XSSattack...

CVE-2023-39370

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

CVE-2023-39370

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

Cross site scripting

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

CVE-2023-39370

CVE-2023-39370 affects StarTrinity Softswitch, specifically version 2023-02-16, with a Persistent XSS vulnerability (CWE-79) in the web UI. Root cause is improper handling of user-supplied input leading to script injection. Documented impact includes confidentiality and integrity concerns (per CV...

CVE-2023-39370 StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79)

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

CVE-2023-39370 StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79)

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

CVE-2023-39370: Improper Neutralization of Input During Web Page Generation

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

PT-2023-26899 · Startrinity · Startrinity Softswitch

Name of the Vulnerable Software and Affected Versions: StarTrinity Softswitch version 2023-02-16 Description: The issue is related to a Persistent XSS CWE-79 in StarTrinity Softswitch. Recommendations: For StarTrinity Softswitch version 2023-02-16, at the moment, there is no information about a...

Malicious code in emon-testt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc3e1ddd0c9bd0c6e361f9383435fa90d24ddfb9642622862818d1aecfe88d29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...