51 matches found
tableExport.jquery.plugin 跨站脚本漏洞
tableExport.jquery.plugin is a jQuery plugin. Used to export html tables to JSON, XML, CSV, TSV, TXT, SQL, Word, Excel, PNG and PDF. A cross-site scripting vulnerability exists in the GitHub repository hhurz/tableexport.jquery.plugin versions prior to 1.25.0, which originates from the transfer of...
Backdoor Found in Codecov Bash Uploader
Developers have discovered a backdoor in the Codecov bash uploader. Its been there for four months. We dont know who put it there. Codecov said the breach allowed the attackers to export information stored in its users continuous integration CI environments. This information was then sent to a...
curl: HTTP authentication leak in redirects
It was found that curl and libcurl might send their Authentication header to a third party HTTP server upon receiving an HTTP REDIRECT reply. This could leak authentication token to external entities...
curl: HTTP authentication leak in redirects
It was found that curl and libcurl might send their Authentication header to a third party HTTP server upon receiving an HTTP REDIRECT reply. This could leak authentication token to external entities...
The vulnerability of the pg_user_mappings component in the PostgreSQL database management system allows a hacker to gain access to the login information of a third-party server.
The vulnerability of the pgusermappings component in the PostgreSQL database management system is related to insufficient protection of registration data. Exploiting this vulnerability can allow a perpetrator with USAGE privileges to remotely access the login credentials of a third-party server...
Malicious Typo-Squatting
jquey is a maliciously typo-squatting package. During the installation of this package, the user’s private SSH key and bash history are set to a third party server...
Malicious Typo-Squatting
coffescript is a maliciously typo-squatting package. During the installation of these packages, the user’s private SSH key and bash history are set to a third party server...
CVE-2017-16205
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16202
The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16205
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16206
The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16203
The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
Information disclosure
The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
Information disclosure
The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
Information disclosure
The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
Information disclosure
The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16206
The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16202
The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...