Malware in this-is-test-module

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in this-is-test-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42cc414b619b36e4c74b43260274d61dc8a3eba447bb95a4bb4bea65cc510722 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview disgrasya is a malicious package. This package installs a module that steals sensitive data from its target by overwriting legitimate CLI commands with malicious ones. Remediation Avoid using all malicious instances of the disgrasya package. References - Malicious Package Discovery Credi...

CVE-2020-36085: Improper Neutralization of Input During Web Page Generation

Stored Cross Site ScriptingXSS vulnerability in Egavilan Media Resumes Management and Job Application Website 1.0 allows remote attackers to inject arbitrary code via First and Last Name in Apply For This Job Form...

CVE-2024-47326

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Share This Image share-this-image allows Reflected XSS.This issue affects Share This Image: from n/a through = 2.01...

CVE-2024-8761

The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...

Malicious code in fix-this (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ff8667daee572e58927eeaf0225c295d5a3c95eaa66def24cb25a4efccdb385 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-51838

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smajda Pull This pull-this allows DOM-Based XSS.This issue affects Pull This: from n/a through = 1.1...

CVE-2024-51838 WordPress Pull This plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smajda Pull This pull-this allows DOM-Based XSS.This issue affects Pull This: from n/a through = 1.1...

CVE-2024-51838 WordPress Pull This plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jon Smajda Pull This allows DOM-Based XSS.This issue affects Pull This: from n/a through 1.1...

CVE-2024-51838

CVE-2024-51838 describes a DOM-based XSS in the WordPress plugin Pull This (by Jon Smajda), affecting versions from n/a through 1.1. The issue is triggered by improper input neutralization during web page generation. The connected documents confirm the vulnerability type and affected plugin, and ...

PT-2024-34965

Name of the Vulnerable Software and Affected Versions Pull This versions 1.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This is a high-severity XSS vulnerability. Users are urged to update to the latest...

CVE-2024-51838: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smajda Pull This pull-this allows DOM-Based XSS.This issue affects Pull This: from n/a through = 1.1...

WordPress plugin Pull This has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Cross-site Scripting (XSS)

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the section parameter on the "logs" tab, due to a lack of sanitization in the reportthis...

PT-2024-34160

Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 24.10.0 Description: A Reflected Cross-Site Scripting XSS vulnerability in the section parameter of the logs tab of a device allows attackers to inject arbitrary JavaScript. This vulnerability results in the executi...

WordPress Pull This plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Pull This versions = 1.1...

WordPress Pull This Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Pull This Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51838 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 538facb51ff5 Credits SOPROBRO Required privilege Contributor Publishe...

SUSE CVE-2024-50092

In the Linux kernel, the following vulnerability has been resolved: net: netconsole: fix wrong warning A warning is triggered when there is insufficient space in the buffer for userdata. However, this is not an issue since userdata will be sent in the next iteration. Current warning message:...

UBUNTU-CVE-2024-50092

In the Linux kernel, the following vulnerability has been resolved: net: netconsole: fix wrong warning A warning is triggered when there is insufficient space in the buffer for userdata. However, this is not an issue since userdata will be sent in the next iteration. Current warning message:...