MAL-2025-41409 Malicious code in terminal-suggest (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in terminal-suggest (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in yelp_search_suggest (npm)

The package yelpsearchsuggest was found to contain malicious code...

MAL-2025-40449 Malicious code in yelp_search_suggest (npm)

The package yelpsearchsuggest was found to contain malicious code...

The vulnerability of the XWiki.SearchSuggestSourceClass class in the XWiki platform, a collaborative web application platform. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the XWiki.SearchSuggestSourceClass in the XWiki platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Insecure Deserialization

TYPO3 is vulnerable to Insecure Deserialization. The vulnerability is due to failing to properly validate incoming data in the suggest wizard, which allows an attacker to exploit insecure unserialize operations. A valid backend user account is required to exploit this vulnerability...

PT-2024-24096 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 5.0-rc-1 through 14.10.19 XWiki Platform versions 15.5.3 and earlier XWiki Platform versions prior to 15.9-rc-1 Description: The issue allows any user with edit rights on any page to execute code on the server by addin...

CVE-2023-40599

Regular expression Denial-of-Service ReDoS exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js,...

CVE-2023-2168

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inje...

CVE-2023-2168

CVE-2023-2168 – TaxoPress (WordPress plugin) is a stored cross-site scripting vulnerability in the Suggest Terms Title field, affecting TaxoPress versions up to 3.6.4. The issue arises from insufficient input sanitization and output escaping, enabling an authenticated attacker with Editor+ privil...

CVE-2023-2168 TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inje...

Malicious Package

Overview web-suggest is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

SUSE CVE-2016-1927

The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes it easier for remote attackers to guess passwords via a brute-force approach...

Malicious code in web-suggest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c96e4f63375b8c1f6493ccb2333bd63d9e3ca782efe9bf35b6d5c336a92993b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-961 Malicious code in web-suggest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c96e4f63375b8c1f6493ccb2333bd63d9e3ca782efe9bf35b6d5c336a92993b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mini-suggest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 895aff62da3563e94b2f4b00f28219c44afa3be20008634bc44dd99567f21361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-600 Malicious code in mini-suggest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 895aff62da3563e94b2f4b00f28219c44afa3be20008634bc44dd99567f21361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XVIDEOS: Self-XSS on Suggest Tag dialog box

Summary: Stored cross-site scripting arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way. vulnerable URL : https://www.xvideos.com/video57921571/friendb.ifd. Vulnerability Description : Application have a add ta...

PT-2022-36686 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the AffixMgr::cpdpat check, AffixMgr::compound check, and SuggestMgr::checkword...

PT-2022-37274 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the SfxEntry::add, AffixMgr::expand rootword, and SuggestMgr::ngsuggest functions. N...