EUVD-1999-1072

Malware in sbrugna...

EUVD-1999-1073

Malware in sbrugna...

EUVD-2024-38161

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-17520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tools/urlhandler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote...

GO-2025-3886 OliveTin OS Command Injection vulnerability in github.com/OliveTin/OliveTin

OliveTin OS Command Injection vulnerability in github.com/OliveTin/OliveTin...

Malicious code in suddenly-tin-proud (npm)

The package suddenly-tin-proud was found to contain malicious code...

MAL-2025-34155 Malicious code in suddenly-tin-proud (npm)

The package suddenly-tin-proud was found to contain malicious code...

MAL-2025-796 Malicious code in analytics-biscuit-tin (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in analytics-biscuit-tin (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-39656

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Uncanny Owl Tin Canny Reporting for LearnDash allows Reflected XSS.This issue affects Tin Canny Reporting for LearnDash: from n/a through 4.3.0.7...

CVE-2024-39656 WordPress Tin Canny Reporting for LearnDash plugin <= 4.3.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Uncanny Owl Tin Canny Reporting for LearnDash allows Reflected XSS.This issue affects Tin Canny Reporting for LearnDash: from n/a through 4.3.0.7...

CVE-2024-39656 WordPress Tin Canny Reporting for LearnDash plugin <= 4.3.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Uncanny Owl Tin Canny Reporting for LearnDash allows Reflected XSS.This issue affects Tin Canny Reporting for LearnDash: from n/a through 4.3.0.7...

WordPress Tin Canny Reporting for LearnDash plugin <= 4.3.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Tin Canny Reporting for LearnDash versions = 4.3.0.7...

WordPress plugin Tin Canny Reporting for LearnDash 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

WordPress Tin Canny Reporting for LearnDash Plugin <= 4.3.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Tin Canny Reporting for LearnDash Type Plugin Vulnerable versions = 4.3.0.7 Fixed in 4.3.0.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-39656 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e6e93ecaf931 Credits Dave Jong...

PT-2024-28594 · Uncanny Owl · Uncanny Owl Tin Canny Reporting

Name of the Vulnerable Software and Affected Versions: Uncanny Owl Tin Canny Reporting for LearnDash versions prior to 4.3.0.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

Malicious code in lita_onewheel-beer-tin-bucket (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f43936a0eaf2beb60a4c9a8ec719ded05e11b5e6e3469c8379f251d3ba31833 --- Credit: OpenSSF source...

MAL-2024-6968 Malicious code in lita_onewheel-beer-tin-bucket (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f43936a0eaf2beb60a4c9a8ec719ded05e11b5e6e3469c8379f251d3ba31833 --- Credit: OpenSSF source...

tin-tonton.com Cross Site Scripting vulnerability OBB-3903327

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cross site scripting

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as problematic. This affects an unknown part of the file addmaterialsubmit.php. The manipulation of the argument tin leads to cross site scripting. It is possible to initiate the attack remotely. The...