774 matches found
CVE-2024-9177
CVE-2024-9177 concerns Themedy Toolbox for WordPress. The vulnerability is Stored Cross-Site Scripting (XSS) via multiple shortcodes (themedy_col, themedy_social_link, themedy_alertbox, themedy_pullleft; and themedy_button for versions ≤ 1.0.15) caused by insufficient input sanitization and outpu...
CVE-2024-9177 Themedy Toolbox <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
The Themedy Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's themedycol, themedysociallink, themedyalertbox, and themedypullleft shortcodes in all versions up to, and including, 1.0.14, and up to, and including 1.0.15 for the plugin's themedybutton...
WordPress Themedy Toolbox plugin <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Multiple Shortcodes vulnerability discovered by Francesco Carlucci in WordPress Plugin Themedy Toolbox versions = 1.0.15...
WordPress plugin Themedy Toolbox 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Themedy Toolbox Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)
Software Themedy Toolbox Type Plugin Vulnerable versions = 1.0.15 Fixed in 1.0.16 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9177 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 23274631c438 Credits Francesco Carlucci...
Moderate: Red Hat Bug Fix Advisory: Updated rhel9/toolbox container image
An updated rhel9/toolbox container image is now available in the Red Hat container registry. The rhel9/toolbox container image can be used with Toolbox to obtain RHEL based containerized command line environments to aid with development and software testing. Toolbox is built on top of Podman and...
Malicious code in toolbox-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2df94f6499b37161c460ae24047d64d2db531042b7ea4e2f4138128bf723acdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7867 Malicious code in toolbox-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2df94f6499b37161c460ae24047d64d2db531042b7ea4e2f4138128bf723acdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in arnold-toolbox (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3af217ab42360fa62b1e1e03668e6d7e45ce26df78ea96f2c6726838d74d82d1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11525 Malicious code in arnold-toolbox (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3af217ab42360fa62b1e1e03668e6d7e45ce26df78ea96f2c6726838d74d82d1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in jqtools-toolbox-expose (npm)
The package contains code to exfiltrate user and host information to an oastify domain. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf8ecc5384976555e101e147d0456707c86467e52647ed0bdbc91bc47639356a The OpenSSF Package Analysis project identified...
MAL-2024-7784 Malicious code in jqtools-toolbox-expose (npm)
The package contains code to exfiltrate user and host information to an oastify domain. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf8ecc5384976555e101e147d0456707c86467e52647ed0bdbc91bc47639356a The OpenSSF Package Analysis project identified...
Malicious code in toolbox-controller (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08eb63c88d757784c7886fd9e365d836ff111c5c27741eef78fed201a5e485e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Important: Red Hat Security Advisory: toolbox security update
An update for toolbox is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
RHEL 9 : toolbox (RHSA-2024:4443)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4443 advisory. Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and othe...
Malicious code in wmi-toolbox (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6214 Malicious code in wmi-toolbox (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in stitch-ui-toolbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8c164c3cf7998ef763616f524ca40c36a007e570d7c43c1ee9bff41689d29cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-3055 Malicious code in stitch-ui-toolbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8c164c3cf7998ef763616f524ca40c36a007e570d7c43c1ee9bff41689d29cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...