CVE-2024-50346 WebFeed HTML injection vulnerabilities

WebFeed is a lightweight web feed reader extension for Firefox/Chrome. Multiple HTML injection vulnerabilities in WebFeed can lead to CSRF and UI spoofing attacks. A remote attacker can provide malicious RSS feeds and attract the victim user to visit it using WebFeed. The attacker can then inject...

CVE-2024-50346 WebFeed HTML injection vulnerabilities

WebFeed is a lightweight web feed reader extension for Firefox/Chrome. Multiple HTML injection vulnerabilities in WebFeed can lead to CSRF and UI spoofing attacks. A remote attacker can provide malicious RSS feeds and attract the victim user to visit it using WebFeed. The attacker can then inject...

CVE-2024-50346

WebFeed is a lightweight RSS/Atom reader extension for Firefox/Chrome. The identified issue comprises multiple HTML injection vulnerabilities in WebFeed (prior to version 0.9.2) that can lead to CSRF and UI spoofing. A remote attacker can supply malicious RSS feeds and lure a user to visit them v...

RHEL 7 : openstack-manila-ui (RHSA-2016:2116)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2016:2116 advisory. OpenStack's File Share Service manila provides the means to easily provision shared file systems that can be consumed by multiple instances. These...

PT-2024-34156 · Webfeed · Webfeed

Name of the Vulnerable Software and Affected Versions: WebFeed versions prior to 0.9.2 Description: The issue concerns multiple HTML injection vulnerabilities that can lead to CSRF and UI spoofing attacks. A remote attacker can provide malicious RSS feeds, attracting the victim user to visit them...

IBM CICS TX Standard Web UI Cross-Site Request Forgery Vulnerability

IBM CICS TX Standard is a comprehensive single-transaction runtime package from International Business Machines IBM that provides a cloud-native deployment model for standalone applications. A cross-site request forgery vulnerability exists in the IBM CICS TX Standard Web UI, which can be exploit...

WebFeed 跨站脚本漏洞

WebFeed is a lightweight RSS/Atom reader from the individual developers at taoso. A cross-site scripting vulnerability exists in WebFeed version 0.9.2, which stems from the inclusion of multiple HTML injection vulnerabilities in WebFeed that could lead to cross-site request forgery and UI spoofin...

RHEL 7 : python-XStatic-jquery-ui (RHSA-2017:0161)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:0161 advisory. jQuery UI is a set of user interface interactions, effects, widgets, and themes built on top of the jQuery JavaScript library. Security Fixes: It was...

Malicious code in @gthwebdev/ui-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62aaab200b33789e76005a82f8665eaec345f6c173d63c8fdae72dff0cc2855d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-41745

IBM CICS TX Standard is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2024-41745

CVE-2024-41745 affects IBM CICS TX Standard Web UI with a cross-site scripting (XSS) vulnerability. An unauthenticated attacker can embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. IBM-issued guidance indicates the vulnerability is ...

CVE-2024-41745 IBM CICS TX Standard cross-site scripting

IBM CICS TX Standard is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

The vulnerability of the GetConfPath() function in the Nginx UI server’s user interface allows a hacker to write arbitrary files.

The vulnerability of the GetConfPath function in the Nginx UI server’s user interface is related to the improper handling of JSON fields, resulting in incorrect values being retrieved without proper validation. This issue arises due to a faulty restriction on the path to the restricted directory...

openSUSE: Security Advisory for 389 (SUSE-SU-2024:3843-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in allocations-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2043c21b9a8ddcf7961abb0f633a777981430b94043ebf735afb392ad92c84b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10300 Malicious code in allocations-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2043c21b9a8ddcf7961abb0f633a777981430b94043ebf735afb392ad92c84b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-8934

Beckhoff TwinCAT Package Manager is affected by a local command injection vulnerability. A local user with administrative rights can enter specially crafted values in the UI to cause arbitrary OS commands to execute. The vulnerability is associated with TwinCAT Package Manager versions prior to 1...

CVE-2024-8934 Beckhoff: Local command injection via TwinCAT Package Manager

A local user with administrative access rights can enter specialy crafted values for settings at the user interface UI of the TwinCAT Package Manager which then causes arbitrary OS commands to be executed...

Malicious code in blossom-flex-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47d07f8c0d920761bbd8a7c5575c35beae11b8587240d944320d8c88434ad307 The OpenSSF Package Analysis project identified 'blossom-flex-ui' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10298 Malicious code in blossom-flex-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47d07f8c0d920761bbd8a7c5575c35beae11b8587240d944320d8c88434ad307 The OpenSSF Package Analysis project identified 'blossom-flex-ui' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...