132 matches found
MAL-2024-2771 Malicious code in npm_package_babel_presets_1_0 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in npm_package_babel_presets_1_0 (npm)
--- -= Per source details. Do not edit below this line.=-...
The vulnerability of the postx_presets_callback() function in the PostX plugin of the WordPres content management system allows a hacker to escalate their privileges and gain access to read, modify, or delete data.
The vulnerability of the postxpresetscallback function in the PostX plugin of the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges and gain access to read, modify,...
GHSA-GQ9F-8RJ4-W7JC Moodle CSRF risk in admin preset tool management of presets
Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk...
CVE-2024-34001 moodle: CSRF risk in admin preset tool management of presets
Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk...
blinksocks has weak encryption algorithms
An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...
PT-2023-31578 · Unknown · Blinksocks
Name of the Vulnerable Software and Affected Versions: blinksocks version 3.3.8 Description: An issue was discovered in the component /presets/ssr-auth-chain.js, allowing remote attackers to obtain sensitive information via weak encryption algorithms. Recommendations: For blinksocks version 3.3.8...
CVE-2023-50481
CVE-2023-50481 affects blinksocks 3.3.8. The vulnerability is in the component /presets/ssr-auth-chain.js, due to the use of weak encryption algorithms (and fixed IVs) that can disclose sensitive information. Impact is described as sensitive information disclosure; no exploit details are provided...
CVE-2023-34112
JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the bytedeco/javacpp-presets use the github.event.headcommit.message parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection...
Command injection
JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the bytedeco/javacpp-presets use the github.event.headcommit.message? parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection...
CVE-2023-34112 JavaCPP project actions vulnerable to code injection
JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the bytedeco/javacpp-presets use the github.event.headcommit.message parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection...
CVE-2023-34112
CVE-2023-34112 affects JavaCPP Presets (bytedeco/javacpp-presets) where actions use the github.event.head_commit.message in an insecure way, enabling command injection via string interpolation. The issue has no publicly reported exploits and is addressed in version 1.5.9; users are advised to upg...
PT-2023-24684 · Unknown · Javacpp Presets
Name of the Vulnerable Software and Affected Versions: JavaCPP Presets versions prior to 1.5.9 Description: The issue concerns the insecure use of the github.event.head commit.message parameter in JavaCPP Presets, leading to a command injection vulnerability due to string interpolation. No...
JavaCPP Presets 代码注入漏洞
JavaCPP Presets is a Bytedeco open source project to provide native C++ libraries for Java distributions. A code injection vulnerability exists in JavaCPP Presets versions prior to 1.5.9, which stems from the fact that all operations use parameters in an insecure manner that can lead to command...
Cross-site Scripting (XSS)
concrete5/concrete5 is vulnerable to Cross-site Scripting XSS. The vulnerability exists in due to lack of sanitization when saving presets on search which allows an attacker to inject and execute arbitrary javascript...
GHSA-2J26-J953-2RPH Stored cross site scripting on saved presets
Concrete CMS previously concrete5 before 9.2 is vulnerable to Stored XSS on Saved Presets on search...
Stored cross site scripting on saved presets
Concrete CMS previously concrete5 before 9.2 is vulnerable to Stored XSS on Saved Presets on search...
CVE-2023-28474
Concrete CMS previously concrete5 in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Saved Presets on search...