12370 matches found
CVE-2017-20095
CVE-2017-20095 affects the WordPress plugin Simple Ads Manager . The connected sources describe a remote, network-exploitable vulnerability that leads to code injection due to manipulation of unknown code. Public documentation labels it as critical/high impact (e.g., NVD CVSS v3.1 base score 9.8,...
CVE-2017-20095 Simple Ads Manager Plugin code injection
A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely...
WordPress Plugin Simple Ads Manager 代码注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Plugin Simple Ads Manager is vulnerable to code injection, which can be exploited by remote attacke...
CVE-2022-32987
Multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields...
CVE-2022-32987
CVE-2022-32987 concerns multiple cross-site scripting (XSS) vulnerabilities in Simple Bakery Shop Management System v1.0, specifically in the /bsms/?page=manage_account page. The issue arises from crafted input in the Username or Full Name fields, enabling execution of arbitrary web scripts/HTML....
Malicious Package
Overview th-simple-keyring is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...
Very Simple Breadcrumb <= 1.0 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. Put the following payload in the "Breadcrumb css class name" settings of the plugin: "alert/XSS/...
Very Simple Breadcrumb <= 1.0 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Put the following payload in the "Breadcrumb css class name" settings of the plugin: "...
SAP FRUN Simple Diagnostics Agent 1.0 Missing Authentication
Onapsis Security Advisory 2022-0004: Missing Authentication check in SAP Focused Run Simple Diagnostics Agent 1.0 Impact on Business Because the Simple Diagnostic Agent SDA handles several important configuration and critical credential information, a successful attack could lead to the control o...
Malicious code in simple_cups-handler (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c2066a165abae91b03f4a58ebbdf175295797d01dde9947ce8b6852b1a76c3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fetchr-simple-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00c55fe8ab94290b13b577dde8ad8db6827bd0592b5d1ad48785168d04e39714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3015 Malicious code in fetchr-simple-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00c55fe8ab94290b13b577dde8ad8db6827bd0592b5d1ad48785168d04e39714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in aws-simple-cicd (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a27cc2b92403fa555f199694756a21013cafbd1bed8513bca1d856ecfa3fc286 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1202 Malicious code in aws-simple-cicd (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a27cc2b92403fa555f199694756a21013cafbd1bed8513bca1d856ecfa3fc286 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mbed-js-simple-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 616edcb5a02bf009ddbb7d38c285d19f01ac70e1bf21e9cb7e7d519db4ff379d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4515 Malicious code in mbed-js-simple-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 616edcb5a02bf009ddbb7d38c285d19f01ac70e1bf21e9cb7e7d519db4ff379d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-simple-samples-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf57a5ef8d95d18083bb05108aef0b76cb6a924093c7ed79d9cfdb1c2f17be3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in th-simple-keyring (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423113b750b113812f093f41e24a53d7cb2523615dfc6283d4011dcb7b7cd32a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6544 Malicious code in th-simple-keyring (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423113b750b113812f093f41e24a53d7cb2523615dfc6283d4011dcb7b7cd32a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...