PT-2020-21124

Name of the Vulnerable Software and Affected Versions jquery-airload version 0.2.5 Description The issue concerns malicious code in version 0.2.5 of jquery-airload. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the...

PT-2020-21356

Name of the Vulnerable Software and Affected Versions pensi-scheduler version 1.1.3 Description The issue concerns malicious code in the pensi-scheduler package that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This...

PT-2020-21508

Name of the Vulnerable Software and Affected Versions pyramid-proportion version 1.0.5 Description The issue concerns malicious code in version 1.0.5 of the pyramid-proportion package. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from for...

PT-2020-21019

Name of the Vulnerable Software and Affected Versions slush-fullstack-framework version 0.9.2 Description The issue concerns malicious code in version 0.9.2 of the software. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and send...

PT-2020-21052

Name of the Vulnerable Software and Affected Versions radicjs version 0.2.1 Description The issue concerns malicious code in version 0.2.1 of radicjs that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This extracted data is...

PT-2020-21358

Name of the Vulnerable Software and Affected Versions dictum.js version 1.0.5 Description The issue concerns malicious code in version 1.0.5 of dictum.js, which when executed in a browser, can enumerate fields such as password, cvc, and cardnumber from forms. The extracted values are then sent to...

PT-2020-21233

Name of the Vulnerable Software and Affected Versions dossier version 0.0.4 Description The issue concerns malicious code in version 0.0.4 of the dossier module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the...

PT-2020-21177

Name of the Vulnerable Software and Affected Versions another-date-range-picker version 4.1.48 Description The issue concerns malicious code in a specific version of the software, which, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields fro...

PT-2020-21232

Name of the Vulnerable Software and Affected Versions @impala/bmap version 1.0.3 Description The issue concerns malicious code in version 1.0.3 of the @impala/bmap module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends...

PT-2020-21287

Name of the Vulnerable Software and Affected Versions react-server-native version 0.0.7 Description The issue concerns malicious code in version 0.0.7 of react-server-native that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms...

PT-2020-21185

Name of the Vulnerable Software and Affected Versions impala version 1.1.7 Description The issue concerns malicious code in a specific version of the software, which, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This...

PT-2020-21524

Name of the Vulnerable Software and Affected Versions dynamo-schema version 0.0.3 Description The issue concerns malicious code in version 0.0.3 of the dynamo-schema module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and send...

PT-2020-20995

Name of the Vulnerable Software and Affected Versions simple-alipay version 1.0.1 Description The issue concerns malicious code in version 1.0.1 of the simple-alipay module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and send...

PT-2020-21186

Name of the Vulnerable Software and Affected Versions modlibrary version 0.1.1 Description The issue concerns malicious code in version 0.1.1 of the modlibrary module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the...

PT-2020-21044

Name of the Vulnerable Software and Affected Versions xoc version 1.0.7 Description The issue concerns malicious code in version 1.0.7 of the xoc module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the extracted valu...

PT-2020-20954

Name of the Vulnerable Software and Affected Versions nginxbeautifier version 1.0.14 Description The issue concerns malicious code in a specific version of the software, which, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms...

654.pl Cross Site Scripting vulnerability OBB-1274576

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

ping24.pl Cross Site Scripting vulnerability OBB-1273943

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

juvenia2000.pl Cross Site Scripting vulnerability OBB-1268287

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

kupiec24.pl Cross Site Scripting vulnerability OBB-1266886

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...