10 matches found
CVE-2026-1893
The Orbisius Random Name Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnlabel' parameter in the 'orbisiusrandomnamegenerator' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-1893 Orbisius Random Name Generator <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btn_label' Shortcode Attribute
The Orbisius Random Name Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnlabel' parameter in the 'orbisiusrandomnamegenerator' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it...
MAL-2025-123340 Malicious code in sound_condor_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41aa25ca51a8b350937ed927a7724322879a7881d9c5841eac02c7c80d048a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kresna-gaplek88-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15c62ffcaef6574be8d6f57293eef59d91e0b9169316fc655f21517667b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-110230 Malicious code in urban_leech-gooddev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0dc80c4f4e86e1fc1ed861c288b907aefd75e3372da27c68f4002aff6135a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in oktafian-getuk13-tititugel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd6701c79a57f3be750bff1eaa7bb97ad1e8e59854320c62050cd8b08861da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Fedora: Security Advisory for rust-names (FEDORA-2024-40ee18b2e7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 39 Update: rust-names-0.14.0-2.fc39
A random name generator with names suitable for use in container instances, project names, application instances, etc...
Fedora: Security Advisory for rust-names (FEDORA-2024-ce2936b568)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...