CVE-2023-37976

CVE-2023-37976: Unauthenticated Reflected Cross-Site Scripting in WordPress Radio Forge Muses Player with Skins plugin (versions <= 2.5). The connected sources confirm the vulnerability is XSS with unauthenticated exposure and no publicly documented fix/version yet. Wordfence entries list the ...

WordPress Plugin Radio Forge Muses Player with Skins 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

The vulnerability of the XWikiSkins class in the XWiki Platform, a platform for creating collaborative web applications, allows attackers to gain access to read, modify, or delete data.

The vulnerability of the SkinsCode.XWikiSkinsSheet method implemented in the XWikiSkins class of the XWiki Platform for creating collaborative web applications is related to the failure to neutralize instructions in the dynamically executed code when processing documents from the /SkinsCode...

WordPress Contact Form 7 Skins Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form 7 Skins Type Plugin Vulnerable versions = 2.1 Fixed in 2.1.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 6924d48f2e2e Credits Rafie Muhammad Patchstack Require...

[SECURITY] Fedora 38 Update: qmmp-2.1.2-4.fc38

This program is an audio-player, written with help of Qt library. The user interface is similar to winamp or xmms. Main opportunities: Winamp and xmms skins support plugins support MPEG1 layer 2/3 support Ogg Vorbis support native FLAC support WavePack support ModPlug support PCM WAVE support CD...

Fedora: Security Advisory for qmmp (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE CVE-2018-14056

ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories...

Malicious code in free-fortnite-skins-genrator-en4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 664c07b1a7fedffc1a5198ed78abc28a06c20dad03c2d7a187339d6f71f7185f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3163 Malicious code in free-fortnite-skins-genrator-en4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 664c07b1a7fedffc1a5198ed78abc28a06c20dad03c2d7a187339d6f71f7185f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-fortnite-skins-genrator-en5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff40e477d49011b4a34505bbf334026e1a1818be6542a4745b5b102e88370e8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3164 Malicious code in free-fortnite-skins-genrator-en5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff40e477d49011b4a34505bbf334026e1a1818be6542a4745b5b102e88370e8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-fortnite-skins-genrator-en1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ffd844a8765d19c950c37fa5b33387a65397cdd8e03fbb78aadd1dceb9d1222 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-fortnite-skins-genrator-en3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 888571db69832232265f6b2ae74c341235e839746fe4c6bd9f7cc42a577dec42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3167 Malicious code in free-fortnite-skins-genrator-pjb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b93c8b1e60480cbee34ff2076050683f0e580f796c89b7ce6671d5ca8e1fbf96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3162 Malicious code in free-fortnite-skins-genrator-en3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 888571db69832232265f6b2ae74c341235e839746fe4c6bd9f7cc42a577dec42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3160 Malicious code in free-fortnite-skins-genrator-en1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ffd844a8765d19c950c37fa5b33387a65397cdd8e03fbb78aadd1dceb9d1222 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3161 Malicious code in free-fortnite-skins-genrator-en2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d6781a8b159c3f5000e5bde9c2185c01e7f764e9e8ff2d5aa94d43ad17ee58d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-fortnite-skins-genrator-inds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb9161e5b9c611c670e3fa02c570fe8747815d8f8755fa4342c2c33daaac2aae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-fortnite-skins-genrator-pjb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b93c8b1e60480cbee34ff2076050683f0e580f796c89b7ce6671d5ca8e1fbf96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3165 Malicious code in free-fortnite-skins-genrator-inds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb9161e5b9c611c670e3fa02c570fe8747815d8f8755fa4342c2c33daaac2aae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...