12 matches found
WS-2022-0379
readthedocs before 8.8.1 is vulnerable to Cross-Site Scripting. This vulnerability allowed a malicious user to serve arbitrary HTML files from the main application domain readthedocs.org/readthedocs.com by exploiting a vulnerability in the code that serves downloadable content from a project...
Malicious code in owasp-aasvs-to-readthedocs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c0e5a6ea6ed26605b45a296a29db52bbfcd07788c446b2abdb5a77bbd80d2ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in owasp-aasvs-to-readthedocs
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-9462 Malicious code in owasp-aasvs-to-readthedocs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c0e5a6ea6ed26605b45a296a29db52bbfcd07788c446b2abdb5a77bbd80d2ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sphinx-rtd-theme-cilium (PyPI)
--- -= Per source details. Do not edit below this line.=-...
readthedocs-sphinx-search vulnerable to cross-site scripting when including search results from malicious projects
Impact This vulnerability could have allowed an attacker to include arbitrary HTML content in search results by having a user search a malicious project. This was due to our search client not correctly escaping all user content from search results. You can find more information in the advisory...
GHSA-XGFM-FJX6-62MJ readthedocs-sphinx-search vulnerable to cross-site scripting when including search results from malicious projects
Impact This vulnerability could have allowed an attacker to include arbitrary HTML content in search results by having a user search a malicious project. This was due to our search client not correctly escaping all user content from search results. You can find more information in the advisory...
PT-2024-40529 · Unknown · Readthedocs-Sphinx-Search
Name of the Vulnerable Software and Affected Versions: readthedocs-sphinx-search versions prior to 0.3.2 Description: This issue could have allowed an attacker to include arbitrary HTML content in search results by having a user search a malicious project. The problem was due to the search client...
TEx - Telegram Monitor
TEx is a Telegram Explorer tool created to help Researchers, Investigators and Law Enforcement Agents to Collect and Process the Huge Amount of Data Generated from Criminal, Fraud, Security and Others Telegram Groups. BETA VERSION Please note that this project has been in beta for a few weeks, so...
PT-2022-28226 · Unknown · Readthedocs
Name of the Vulnerable Software and Affected Versions: readthedocs versions prior to 8.8.1 Description: This issue allowed a malicious user to serve arbitrary HTML files from the main application domain by exploiting a vulnerability in the code that serves downloadable content from a project...
Fuzzing and Data Manipulation Framework: Fuddly
Among the variety of complementary approaches used in the security evaluation of a target e.g. , software, an embedded equipment, etc. , fuzz testing—abbreviated fuzzing —is widely recognized as an effective means to help discovering security weaknesses in a target. Fuzzing is a software testing...
