MAL-2025-1920 Malicious code in req-management-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1869 Malicious code in leafygreen-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-23555

CVE-2025-23555 affects the WordPress plugin Ui Slider Filter By Price (versions ≤ 1.1). The issue is a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Impact details in the sources consistently describe a reflected XSS scenari...

CVE-2025-23555 WordPress Ui Slider Filter By Price plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Ui Slider Filter By Price allows Reflected XSS. This issue affects Ui Slider Filter By Price: from n/a through 1.1...

Malicious code in @ethena/shared-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aef2408e95a098dd74ce27cc6b45910bd5662840209b1b083e75ccfadd5f51c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2010-5312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web...

CVE-2024-5848

A reflected cross-site scripting XSS vulnerability exists in multiple WSO2 products due to improper input validation. User-supplied data is directly included in server responses from vulnerable service endpoints without proper sanitization or encoding, allowing an attacker to inject malicious...

CVE-2025-20116

A vulnerability in the web UI of Cisco APIC could allow an authenticated, remote attacker to perform a stored XSS attack on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper input validation in the web...

MAL-2025-1591 Malicious code in findomestic-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 731a944111d653908b4d57be5f92681aa2954a42a4ddea0169b05c3aca65a7c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1592 Malicious code in findomestic-ui-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0442e2c200dd18acbb004c7abe20f1a3144a0a168f7960af7fe390baae799e6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in findomestic-ui-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0442e2c200dd18acbb004c7abe20f1a3144a0a168f7960af7fe390baae799e6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1596 Malicious code in group-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a61a8059a473ae2d2b66d724c1839b7a04ba0271db8fc50adb13e82a67f5cbbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in group-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a61a8059a473ae2d2b66d724c1839b7a04ba0271db8fc50adb13e82a67f5cbbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1625 Malicious code in sddst-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f7f35f1a8196669f72f5a2f8e6eba15a5ed1c4effe4b6629e9375d5d2301685 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sddst-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f7f35f1a8196669f72f5a2f8e6eba15a5ed1c4effe4b6629e9375d5d2301685 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin:Vulnerabiilties in swagger-ui and Bootstrap affect watsonx.data

Summary swagger-ui is vulnerable to conduct spoofing attacks. Bootstrap is vulnerable to cross-site scripting. These could affect watsonx.data. Vulnerability Details CVEID:CVE-2018-25031 DESCRIPTION: swagger-ui could allow a remote attacker to conduct spoofing attacks. By persuading a victim to...

CVE-2024-5848

A reflected cross-site scripting XSS vulnerability exists in multiple WSO2 products due to improper input validation. User-supplied data is directly included in server responses from vulnerable service endpoints without proper sanitization or encoding, allowing an attacker to inject malicious...

CVE-2024-5848 Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products Due to Improper Input Validation

A reflected cross-site scripting XSS vulnerability exists in multiple WSO2 products due to improper input validation. User-supplied data is directly included in server responses from vulnerable service endpoints without proper sanitization or encoding, allowing an attacker to inject malicious...

PT-2025-8921

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A reflected cross-site scripting XSS issue exists due to improper input validation, allowing an attacker to inject malicious JavaScript into server responses from vulnerable service...

Cisco APIC Multiple Vulnerabilities (cisco-sa-apic-multi-vulns-9ummtg5)

According to its self-reported version, Cisco Application Policy Infrastructure Controller is affected by multiple vulnerabilities. - A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could...