17362 matches found
Malicious code in azure-ai-text-analytics-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0be45a664e75a6e45605931661743132d5e63f27e6d555d369b7eeff1694a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1233 Malicious code in azure-ai-text-analytics-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0be45a664e75a6e45605931661743132d5e63f27e6d555d369b7eeff1694a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1232 Malicious code in azure-ai-text-analytics-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88b2db08b01c8ea8b5bf42651328827362002fa84b2b94fe677afcdd0a29b637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-ai-text-analytics-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88b2db08b01c8ea8b5bf42651328827362002fa84b2b94fe677afcdd0a29b637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7028 Malicious code in wafer-text (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52e2a9c3401254859ccf26216c8ce7fa657f59d76d7cfa0f00a32acd705563f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wafer-text (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52e2a9c3401254859ccf26216c8ce7fa657f59d76d7cfa0f00a32acd705563f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in makerjs-wrap-text (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be2128bc765928893850f3d6426a53fe36709f7733af266b64e522fc872e6234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-1889
The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheadertext setting, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfilteredhtml is disallowed...
CVE-2022-0663
The Print, PDF, Email by PrintFriendly WordPress plugin before 5.2.3 does not sanitise and escape the Custom Button Text settings, which could allow high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2022-0663
The Print, PDF, Email by PrintFriendly WordPress plugin before 5.2.3 does not sanitise and escape the Custom Button Text settings, which could allow high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
WordPress plugin Newsletter 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. cross-site scripting...
Popup Builder < 4.1.11 - Admin+ Stored Cross-Site Scripting
The plugin does not escape and sanitize some settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltredhtml is disallowed Create/edit a subscription, enabled the GDPR options in it and add the following payload in the "confirmation text"...
OSIPs - Gathers All Valid IP Addresses From All Text Files From A Directory, And Checks Them Against Whois Database, TOR Relays And Location
This script scans every file from a given folder recursively, extracts every IPv4 and IPv6 address, filters out the public IP addresses and then queries these IPs against TOR relays, WhoIs service and Location service. It outputs 4 files: a CSV file and a JSON file with all details of the IP...
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 安全漏洞
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. An information disclosure vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which stems fr...
Adobe InCopy heap buffer overflow vulnerability
Adobe InCopy is a text editing software for authoring from Adobe U.S. A heap buffer overflow vulnerability exists in Adobe InCopy, which could be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe InCopy Out-of-Bounds Write Vulnerability (CNVD-2022-50230)
Adobe InCopy is a text editing software for creative writing from Adobe, USA. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
The vulnerability of the Oracle Text component of the Oracle Database Server database management system allows a perpetrator to execute arbitrary code.
The vulnerability of the Oracle Text component in the Oracle Database Server database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the Oracle Net network protocol...
Space bug in `clean_text`
An incorrect mapping from HTML specification to ASCII codes was used. Because HTML treats the Form Feed as whitespace, code like this has an injection bug: let html = format!"", cleantextusersuppliedstring; Applications are not affected if they quote their attributes, or if they don't use cleante...
Design/Logic Flaw
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. The Key Storage converter plugin mechanism was not enabled correctly in Rundeck 4.2.0 and 4.2.1, resulting in use of the encryption layer for Key Storage possibly not working. Any credentials created...
