MAL-2024-10960 Malicious code in dep-validator-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af93a927101a23e38ce34664c1c85dc8651f0e3a5a066ec9a110caabe4cadcbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in dep-validator-cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-11463

The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'from', 'to', and 'key' parameters in all versions up to, and including, 5.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

CVE-2024-11463 DeBounce Email Validator <= 5.6.5 - Reflected Cross-Site Scripting

The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'from', 'to', and 'key' parameters in all versions up to, and including, 5.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

CVE-2024-11463

CVE-2024-11463 affects the DeBounce Email Validator WordPress plugin (all versions up to 5.6.5). It enables Reflected Cross-Site Scripting via from, to, and key parameters, allowing unauthenticated attackers to inject scripts in pages/actions triggered by user interaction. The vulnerability is do...

CVE-2024-11463 DeBounce Email Validator <= 5.6.5 - Reflected Cross-Site Scripting

The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'from', 'to', and 'key' parameters in all versions up to, and including, 5.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

CVE-2024-11463: Improper Neutralization of Input During Web Page Generation

The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'from', 'to', and 'key' parameters in all versions up to, and including, 5.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

WordPress plugin DeBounce Email Validator: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

HTML Injection

org.hibernate.validator, hibernate-validator is vulnerable to HTML Injection. The vulnerability is due to improper validation in the 'isValid' method of the SafeHtmlValidator class, where the tag ending can be omitted by using a less-than character, allowing invalid HTML to be rendered...

PT-2024-17015 · WordPress · Debounce Email Validator

Name of the Vulnerable Software and Affected Versions: DeBounce Email Validator plugin for WordPress versions up to, and including, 5.6.5 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated...

WordPress DeBounce Email Validator plugin <= 5.6.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian in WordPress Plugin DeBounce Email Validator versions = 5.6.5...

Malicious code in module-json-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f9de22e9d105a1442fd2bab315de0e956fcabbec66fbfa38d5e3452a01bc33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10761 Malicious code in module-json-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f9de22e9d105a1442fd2bab315de0e956fcabbec66fbfa38d5e3452a01bc33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

at.researchstudio.sat:won-owner-webapp (0.3), at.yawk.dropwizard-nagios:dropwizard-nagios (1.0) +655 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.4.1.final)

org.hibernate:hibernate-validator MAVEN version 5.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - at.researchstudio.sat:won-owner-webapp 0.3 - at.yawk.dropwizard-nagios:dropwizard-nagio...

com.cognifide.aet:aet-maven-plugin (>=2.0.0-rc2, <=3.2.2), com.cognifide.aet:communication-api (>=2.0.0-rc2, <=3.2.2) +65 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (4.3.2.final)

org.hibernate:hibernate-validator MAVEN version 4.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.cognifide.aet:aet-maven-plugin =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =1.0.0.release,...

com.jcabi:jcabi-aether (0.10), com.jcabi:jcabi-aspects (>=0.11, <=0.13) +7 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.1.0.alpha1)

org.hibernate:hibernate-validator MAVEN version 5.1.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.jcabi:jcabi-aether 0.10 - com.jcabi:jcabi-aspects =0.11, =0.2, =0.1, =0.5, =0.5,...

com.github.mike10004:jcabi-mysql-maven-plugin (>=1.0r1, <=1.0r3), org.amebastack.container:ameba-container-grizzly (0.1.7.alpha1) +13 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.2.0.cr1)

org.hibernate:hibernate-validator MAVEN version 5.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.mike10004:jcabi-mysql-maven-plugin =1.0r1, =0.1.7.alpha1, =0.1.7.alpha1,...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +12212 more potentially affected by CVE-2023-1932 via org.hibernate.validator:hibernate-validator (>=6.0.0.alpha1, <=6.2.0.cr1)

org.hibernate.validator:hibernate-validator MAVEN version =6.0.0.alpha1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr4, =2.1.0 and more Source cves: CVE-2023-1932 Source advisory: GHSA-X83M-PF6F-PF...

GHSA-X83M-PF6F-PF9G hibernate-validator Cross-site Scripting vulnerability

A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or...

hibernate-validator Cross-site Scripting vulnerability

A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or...