81 matches found
[SECURITY] Fedora 42 Update: fcitx5-chinese-addons-5.1.10-1.fc42
This provides pinyin and table input method support for fcitx5. Released under LGPL-2.1+. im/pinyin/emoji.txt is derived from Unicode CLDR with modification...
EUVD-2013-3791
Malware in sbrugna...
EUVD-2011-2004
Malware in sbrugna...
EUVD-2023-51622
Malicious code in bioql PyPI...
CVE-2025-9717: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /xorganizationassemblecontrol/jaxrs/unit/ of the component Personal Profile Page. Such manipulation of the argument name/shortName/distinguishedName/pinyin/pinyinInitial/levelNa...
CVE-2023-47511
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SO WP Pinyin Slugs plugin = 2.3.0 versions...
Chinese Hackers Abuse IPv6 SLAAC for AitM Attacks via Spellbinder Lateral Movement Tool
A China-aligned advanced persistent threat APT group called TheWizards has been linked to a lateral movement tool called Spellbinder that can facilitate adversary-in-the-middle AitM attacks. "Spellbinder enables adversary-in-the-middle AitM attacks, through IPv6 stateless address autoconfiguratio...
January 28, 2025—KB5050081 (OS Build 19045.5440) Preview
None None...
Malicious code in pinyin-pra (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b8720c87d902e268ccf6e9db13f00285998cf35b280a6851ef9c3c23b3f0d6b The OpenSSF Package Analysis project identified 'pinyin-pra' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...
CVE-2023-47511
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SO WP Pinyin Slugs plugin = 2.3.0 versions...
CVE-2023-47511
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SO WP Pinyin Slugs plugin = 2.3.0 versions...
CVE-2023-47511 WordPress Pinyin Slugs Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SO WP Pinyin Slugs plugin = 2.3.0 versions...
CVE-2023-47511 WordPress Pinyin Slugs Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SO WP Pinyin Slugs plugin = 2.3.0 versions...
CVE-2023-47511
CVE-2023-47511 affects the WordPress plugin SO WP Pinyin Slugs, vulnerable to an authenticated Stored XSS in versions <= 2.3.0. The issue requires admin-level privileges (admin+) and, per Patchstack, was fixed in version 2.3.1. Public sources (NVD and patch info) describe the CVSS vector as in...
CVE-2023-47511: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SO WP Pinyin Slugs plugin = 2.3.0 versions...
WordPress Plugin Pinyin Slugs Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2023-30474 · WordPress · So Wp Pinyin Slugs
Name of the Vulnerable Software and Affected Versions: SO WP Pinyin Slugs plugin versions prior to 2.3.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For SO WP Pinyin Slugs plugin version...
WordPress Pinyin Slugs Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)
Software Pinyin Slugs Type Plugin Vulnerable versions = 2.3.0 Fixed in 2.3.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47511 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1f3f38b0df7f Credits yuyudhn Required privilege...