Malicious code in babel-preset-data-ui (npm)

The package babel-preset-data-ui was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in babel-preset-data-ui (npm)

The package babel-preset-data-ui was found to contain malicious code...

Alpha Innotec Novelan Heat Pump Full Access

The vulnerability of Alpha Innotec and Novelan thermal pump microprogramming systems is related to the use of pre-set configuration data in the wp2reg-V3.88.0-9015 file. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the device by using...

PT-2020-14340

Name of the Vulnerable Software and Affected Versions KingComposer plugin versions through 2.9.4 for WordPress Description A reflected Cross-Site Scripting issue allows remote attackers to trick a victim into submitting an install online preset AJAX request containing base64-encoded JavaScript,...

CVE-2020-15299: Improper Neutralization of Input During Web Page Generation

A reflected Cross-Site Scripting XSS Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into submitting an installonlinepreset AJAX request containing base64-encoded JavaScript in the kc-online-preset-data POST parameter that is executed...

BAR.- Pre-set Accounting Access

The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, is related to the use of pre-set accounting data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected information...