Malicious code in babel-preset-data-ui (npm)

The package babel-preset-data-ui was found to contain malicious code...

The vulnerability of the microprogramming software of Alpha Innotec and Novelan heat pumps allows a hacker to gain full access to the device.

The vulnerability of Alpha Innotec and Novelan thermal pump microprogramming systems is related to the use of pre-set configuration data in the wp2reg-V3.88.0-9015 file. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the device by using...

CVE-2020-15299: Improper Neutralization of Input During Web Page Generation

A reflected Cross-Site Scripting XSS Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into submitting an installonlinepreset AJAX request containing base64-encoded JavaScript in the kc-online-preset-data POST parameter that is executed...

The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, is related to the use of pre-set accounting data. This allows a perpetrator to gain access to protected information.

The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, is related to the use of pre-set accounting data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected information...