GHSA-FP2W-G92G-FGQ4 @nuxtlabs/github-module made Use of Hard-coded Credentials

https://nuxt.com had a hardcoded GitHub token in the source code of the page. This token had access to multiple repositories under nuxt, nuxtlabs and nuxt-themes GitHub organizations. A patch in version 1.6.2 fixed the issue...

Malicious Package

Overview sks-themes is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

CVE-2023-24381

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NsThemes Advanced Social Pixel plugin = 2.1.1 versions...

CVE-2022-46854

Cross-Site Request Forgery CSRF vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin = 1.0.13 versions...

CVE-2022-46854

Cross-Site Request Forgery CSRF vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin = 1.0.13 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin = 1.0.13 versions...

CVE-2022-46854

CVE-2022-46854 affects the Obox Themes Launchpad – Coming Soon & Maintenance Mode WordPress plugin (versions ≤ 1.0.13). The issue is a Cross-Site Request Forgery (CSRF) vulnerability caused by insufficient CSRF checks in the plugin, potentially enabling unintended actions by authenticated users. ...

CVE-2022-46854 WordPress Launchpad – Coming Soon & Maintenance Mode Plugin Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin = 1.0.13 versions...

CVE-2022-46854 WordPress Launchpad – Coming Soon & Maintenance Mode Plugin Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin = 1.0.13 versions...

WordPress Plugin Obox Themes Launchpad – Coming Soon & Maintenance Mode 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Obox Themes...

CVE-2023-21456

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid...

CVE-2023-21456

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid...

Path traversal

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid...

SAMSUNG Mobile Devices 路径遍历漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile Devices Galaxy Themes Service SMR Mar-2023 Release 1 version, which stems from a path traversal issue...

CVE-2023-21456

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid...

CVE-2023-21456

CVE-2023-21456 affects Galaxy Themes Service prior to SMR Mar-2023 Release 1, enabling path traversal to access arbitrary files with system UID. Root cause: path traversal in Galaxy Themes Service. Impact: high confidentiality impact; no explicit exploitation status in provided documents. Remedia...

CVE-2023-21456

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid...

PT-2023-18224 · Samsung · Galaxy Themes Service

Name of the Vulnerable Software and Affected Versions: Galaxy Themes Service versions prior to SMR Mar-2023 Release 1 Description: A path traversal issue exists, allowing an attacker to access arbitrary files with system uid. Recommendations: For versions prior to SMR Mar-2023 Release 1, update t...

Malicious Package

Overview skyscanner-themes is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

CVE-2023-26255

An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system...