MAL-2026-5049 Malicious code in @lir-portal/web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6cc9f2fe6ad0219df5db208b736cb45305b7e7062ec9d66a3316427e050989f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @lir-portal/web-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-2693 Malicious code in vs-supplier-portal-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4ce50d0cee946b14aa2dee0c469a73331ff0c63bc65b134b3b50edb5d43c54 The package vs-supplier-portal-web was found to contain malicious code. Source: ghsa-malware...

Malicious code in vs-supplier-portal-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4ce50d0cee946b14aa2dee0c469a73331ff0c63bc65b134b3b50edb5d43c54 The package vs-supplier-portal-web was found to contain malicious code. Source: ghsa-malware...

Malware in vs-supplier-portal-web

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2017-4188

Malware in sbrugna...

Malware in creator-portal-web

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in creator-portal-web (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5327398bd579ef0663ef6e1919049ade891f5f0f39b28f9314ce8d3a6040017 Any computer that has this package installed or running should be considered...

Arbitrary File Upload

Overview com.liferay.portal:portal-web is a portal package for liferay. Affected versions of this package are vulnerable to Arbitrary File Upload which allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. Workaround Use the portal.property dl.file.extensions t...

CVE-2022-35227

A vulnerability in SAP NW EP WPC - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a remote attacker to conduct a Cross-Site XSS scripting attack. A successful exploit could allow the attacker to execute arbitrary script code which could lead to...

MAL-2022-5419 Malicious code in portal-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05e39c65406cfe7e8a140b39bd365105d7c4cf25ff7982fec8ef38f9fc4d2787 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in portal-web

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in portal-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05e39c65406cfe7e8a140b39bd365105d7c4cf25ff7982fec8ef38f9fc4d2787 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-25656: Improper Neutralization of Input During Web Page Generation

Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected versions include 7.0 through 7.2.3 without hotfix and 8.0.0 without hotfix...

PT-2021-16733

Name of the Vulnerable Software and Affected Versions Avaya Aura Experience Portal Web management versions 7.0 through 7.2.3 Avaya Aura Experience Portal Web management version 8.0.0 Description Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web managemen...

Cross-site Scripting (XSS)

portal-web is vulnerable to cross-site scripting XSS. The vulnerability exists as the value of category.getName, and message.getSubject, when displaying the html/portlet/messageboards/search.jsp search results, were not sanitized...

CVE-2014-0396: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Portal - Web Services...

PT-2014-3613

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products versions 8.52 through 8.53 Description The issue affects confidentiality and can be exploited by remote attackers through unknown vectors related to Portal - Web Services. Recommendations For versions 8.52 and 8.53, ...

Portal Web Services CRLF Injection / XSS

Exploit Title: Portal Web Services Cms CRLF injection + Cross Site Scripting Vulnerability + Exploit Author: Ashiyane Digital Security Team + Home : www.Ashiyane.org + Vendor Homepage: www.portalwebservices.com + Tested on: Windows 7 + Dork: intext:"Powered By : Portal Web Services"...

CVE-2012-5939: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Welcome.do in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager TADDM 7.2.x before 7.2.1.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...