MAL-2022-222 Malicious code in @e-finance/e-finance-tms-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d138592e7b0a8144ae81a749be39c4091cbb2b5f0a56f81bd5dd3e9b5e96795e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in e-finance-tms-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc86d38fb345a59766dbd667acd1232dad2d6a729e29bba3d06833e5d7d2aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2639 Malicious code in e-finance-tms-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc86d38fb345a59766dbd667acd1232dad2d6a729e29bba3d06833e5d7d2aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29432

Multiple Authenticated administrator or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in TMS-Plugins wpDataTables plugin = 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters...

Cross site scripting

Multiple Authenticated administrator or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in TMS-Plugins wpDataTables plugin = 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters...

CVE-2022-29432 WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated administrator or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in TMS-Plugins wpDataTables plugin = 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters...

CVE-2022-29432

CVE-2022-29432 covers multiple authenticated persistent XSS vulnerabilities in the WordPress plugin wpDataTables (versions

tms-rsa.focus-pluto.co.uk Cross Site Scripting vulnerability OBB-2481373

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-26246

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

CVE-2022-26247

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password...

CVE-2022-26247

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password...

Cross site scripting

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

Authorization

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password...

CVE-2022-26246

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

CVE-2022-26247

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password...

CVE-2022-26246

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

CVE-2022-26247

CVE-2022-26247 pertains to TMS v2.28.0, where an insecure permission on the component /TMS/admin/user/Update2 allows an attacker to modify the administrator account and password. The vulnerability is documented across multiple sources (NVD, Red Hat, OSV, CVELIST, etc.). The available descriptions...

CVE-2022-26246

CVE-2022-26246 describes an XSS vulnerability in TMS v2.28.0, specifically in the component /TMS/admin/setting/mail/createorupdate. The initial entry attributes a cross-site scripting flaw to this component, with CVSS metrics indicating both a Network vector and user interaction requirements depe...

CVE-2022-26247

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password...

TMS 安全漏洞

TMS is a channel-based team communication and collaboration + lightweight task dashboard by weicheng individual developers. A security vulnerability exists in TMS v2.28.0, which originates from an insecure privilege in the component /TMS/admin/user/Update2. The vulnerability can be exploited to...