MAL-2025-47461 Malicious code in circuit-runtime-presenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3cdb658ec8c6d8d9af631260f52c7b97315d6714449b7e8bcd8ac60e65644951 The OpenSSF Package Analysis project identified 'circuit-runtime-presenter' @ 10.0.1 npm as malicious. It is considered malicious because: - The...

CVE-2022-41964

BigBlueButton is an open source web conferencing system. This vulnerability only affects release candidates of BigBlueButton 2.4. The attacker can start a subscription for poll results before starting an anonymous poll, and use this subscription to see individual responses in the anonymous poll...

CVE-2024-54340

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sylviavanos Simple Presenter simple-presenter allows Reflected XSS.This issue affects Simple Presenter: from n/a through = 1.5.1...

CVE-2024-54340

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sylviavanos Simple Presenter simple-presenter allows Reflected XSS.This issue affects Simple Presenter: from n/a through = 1.5.1...

CVE-2024-54340 WordPress Simple Presenter plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sylviavanos Simple Presenter simple-presenter allows Reflected XSS.This issue affects Simple Presenter: from n/a through = 1.5.1...

CVE-2024-54340

CVE-2024-54340 is a reflected Cross‑Site Scripting vulnerability in the WordPress plugin Simple Presenter (Sylvia van Os Simple Presenter). Affected versions are listed as up to 1.5.1 (from n/a through 1.5.1). The issue arises from improper neutralization of input during web page generation, allo...

CVE-2024-54340 WordPress Simple Presenter plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sylvia van Os Simple Presenter allows Reflected XSS.This issue affects Simple Presenter: from n/a through 1.5.1...

WordPress plugin Simple Presenter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress Simple Presenter plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Simple Presenter versions = 1.5.1...

openslides-presenter (=2.0.3), openslides-protocol (=1.0.0) +2 more potentially affected by CVE-2024-22893 via openslides (>=2.1.1 <=2.2.0)

openslides PYPI version =2.1.1, =2.0.1, =2.0.2 Source cves: CVE-2024-22893 Source advisory: OSV:PYSEC-2024-290...

openslides-presenter (=2.0.3), openslides-protocol (=1.0.0) +2 more potentially affected by CVE-2024-22892 via openslides (>=2.1.1 <=2.2.0)

openslides PYPI version =2.1.1, =2.0.1, =2.0.2 Source cves: CVE-2024-22892 Source advisory: OSV:PYSEC-2024-99...

CVE-2024-6053

Improper access control in the clipboard synchronization feature in TeamViewer Full Client prior version 15.57 and TeamViewer Meeting prior version 15.55.3 can lead to unintentional sharing of the clipboard with the current presenter of a meeting...

CVE-2024-6053 Improper access control in the clipboard synchronization feature

Improper access control in the clipboard synchronization feature in TeamViewer Full Client prior version 15.57 and TeamViewer Meeting prior version 15.55.3 can lead to unintentional sharing of the clipboard with the current presenter of a meeting...

AI Voice Scam

Scammers tricked a company into believing they were dealing with a BBC presenter. They faked her voice, and accepted money intended for her...

CVE-2023-25599

A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient validation for the testpresenter.php page. A successful exploit could allow an...

PT-2023-2919 · Mitel · Mitel Mivoice Connect

Name of the Vulnerable Software and Affected Versions: Mitel MiVoice Connect versions through 19.3 SP2 Mitel MiVoice Connect version 22.24.1500.0 Description: The issue is related to insufficient validation for the test presenter.php page, which could allow an unauthenticated attacker to conduct ...

Keynote 跨站脚本漏洞

Keynote is a flexible Rails presenter from Ryan Fitzgerald Personal Developer. A cross-site scripting vulnerability exists in Keynote version 0.x and prior versions, which stems from incorrect manipulation of the parameter value leading to cross-site scripting...

CVE-2022-41964

BigBlueButton is an open source web conferencing system. This vulnerability only affects release candidates of BigBlueButton 2.4. The attacker can start a subscription for poll results before starting an anonymous poll, and use this subscription to see individual responses in the anonymous poll...

Code injection

BigBlueButton is an open source web conferencing system. This vulnerability only affects release candidates of BigBlueButton 2.4. The attacker can start a subscription for poll results before starting an anonymous poll, and use this subscription to see individual responses in the anonymous poll...

CVE-2022-41964

CVE-2022-41964 affects BigBlueButton prior to version 2.4.0. The vulnerability allows a meeting presenter to subscribe to poll results before an anonymous poll starts, enabling viewing of individual responses in the poll. Root cause is an information-disclosure flaw in the poll result subscriptio...