Malicious code in perf-storage-file-share-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea0ff6e1544a452407d2b6c971abab8ad445cfc1c60561a46398601578a271e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5297 Malicious code in perf-storage-file-share-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea0ff6e1544a452407d2b6c971abab8ad445cfc1c60561a46398601578a271e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-storage-file-share (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 041159bc94527c81f2176bfabd7db5944278ebcd81b3a63f6d179c8e069971d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5296 Malicious code in perf-storage-file-share (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 041159bc94527c81f2176bfabd7db5944278ebcd81b3a63f6d179c8e069971d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storage-file-share-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7120b7a5dde3b0d526b62436e0943de69e9f1cb19237210975b085341c466430 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6312 Malicious code in storage-file-share-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7120b7a5dde3b0d526b62436e0943de69e9f1cb19237210975b085341c466430 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-storage-file-share (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92f1ca86e3f847c379b16056e4a77a941e1c763dcdb7d4eaed2e6393179b2bdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1717

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

CVE-2022-1717

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

CVE-2022-1717 Custom Share Buttons with Floating Sidebar < 4.2 - Admin+ Stored XSS

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

CVE-2022-1717

The CVE-2022-1717 entry affects the WordPress plugin “Custom Share Buttons with Floating Sidebar” (versions before 4.2). The root cause is inadequate sanitisation/escaping of certain settings, enabling Stored XSS when unfiltered_html is disallowed and high-privilege users (e.g., admins) could exp...

Malicious code in share-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 573a919a5f99a385c49e135f43877bdf5ce7d34922b04e65a44fea212284a3a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin Custom Share Buttons with Floating Sidebar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Custom Share Buttons with Floating Sidebar plugin versions prior to 4.2 are vulnerable to a...

WordPress Social Media Share Buttons plugin <= 3.8.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas Patchstack Alliance in WordPress Social Media Share Buttons plugin versions = 3.8.4. Solution Update the WordPress Social Media Share Buttons plugin to the latest available version at least 3.8.5...

WordPress ToolBar to Share plugin跨站点请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress ToolBar to Share plugin version 2.0 and prior versions are vulnerable to cross-site request forgery...

FileCloud 访问控制错误漏洞

FileCloud is an ultra-secure content collaboration platform from US-based FileCloud, Inc. providing industry-leading compliance, data governance, data leakage protection, data retention and digital rights management capabilities. An access control error vulnerability exists in FileCloud version...

Samsung Quick Share Access Control Error Vulnerability

Samsung Quick Share, a Quick Share application developed by Samsung Korea, is vulnerable to an access control error in versions prior to Samsung Quick Share 13.1.2.4. The vulnerability stems from improper access control and can be exploited by attackers to access internal files in Quick Share...

Real Player 16.0.3.51 - 'external::Import()' Directory Traversal to Remote Code Execution (RCE)

Exploit Title: Real Player 16.0.3.51 - 'external::Import' Directory Traversal to Remote Code Execution RCE Google Dork: n/a Date: May 31, 2022 Exploit Author: Eduardo Braun Prado Vendor Homepage: http://real.com/ Software Link: http://real.com/ Version: ver. 16.00.282, 16.0.3.51, Cloud 17.0.9.17,...

CVE-2022-1918

The ToolBar to Share plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0. This is due to missing nonce validation on the plugintoolbarcomparte page. This makes it possible for unauthenticated attackers to update the plugins settings and inject...

CVE-2022-1918

The ToolBar to Share plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0. This is due to missing nonce validation on the plugintoolbarcomparte page. This makes it possible for unauthenticated attackers to update the plugins settings and inject...