CVE-2023-22683

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...

CVE-2023-22683 WordPress Clio Grow Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themis Solutions, Inc. Clio Grow plugin = 1.0.0 versions...

OpenTSDB 跨站脚本漏洞

OpenTSDB is a suite of open source, scalable distributed time series databases. A security vulnerability exists in OpenTSDB versions 1.0.0 through 2.4.1, which stems from an insufficient validation of parameters reflected in error messages by a logging endpoint, and could potentially inject and...

OpenTSDB 操作系统命令注入漏洞

OpenTSDB is a suite of open source, scalable distributed time series databases. A security vulnerability exists in OpenTSDB versions 1.0.0 through 2.4.1, which stems from insufficient validation of parameters. An attacker exploiting this vulnerability could execute arbitrary code on the host syst...

PT-2023-10168 · Bestwebsoft · Bestwebsoft Job Board Plugin

Name of the Vulnerable Software and Affected Versions: BestWebSoft Job Board Plugin version 1.0.0 Description: A vulnerability was found in the BestWebSoft Job Board Plugin on WordPress, affecting unknown code and leading to cross-site scripting. The attack can be initiated remotely...

Malicious code in webpack-cli.legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22737261df7f74819a3f3f968e6516db5e37f6621827d6148b290f7650b9992f The OpenSSF Package Analysis project identified 'webpack-cli.legacy' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in webpack-dev-server.legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85cd0dbb01e0045658eb423c4580a09f07f36ce5af1689227f99e72348cda4a6 The OpenSSF Package Analysis project identified 'webpack-dev-server.legacy' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in react-test-renderer-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44a1a6575888ff4c59c07150c3211aa61af227fb9d17025b72af93ba65153098 The OpenSSF Package Analysis project identified 'react-test-renderer-17' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in myattenuator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea4131b4858e840e02fe12b2a8719cfe85598245a84e842b917dd595ea1af4e4 The OpenSSF Package Analysis project identified 'myattenuator' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2023-14915 · Apache · Apache Streampark

Name of the Vulnerable Software and Affected Versions: Apache StreamPark versions 1.0.0 through 1.0.0 Description: The issue arises when a user successfully logs in and attempts to modify their profile. The username is passed to the server-layer as a parameter but is not verified to ensure it...

Malicious code in flp_hk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b67d12ada5f46c9de6e13923538f25159e524761b2188821fd2be3831afd8cc5 The OpenSSF Package Analysis project identified 'flphk' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

Medicine Tracker System SQL注入漏洞

Medicine Tracker System is a drug tracking system by Carlo Montero Personal Developer. A security vulnerability exists in Medicine Tracker System version 1.0.0. An attacker could exploit this vulnerability to perform SQL injection attacks...

PT-2023-22543 · Unknown · Medicine Tracker System

Name of the Vulnerable Software and Affected Versions: Medicine Tracker System in PHP version 1.0.0 Description: The issue concerns a SQL Injection vulnerability. Recommendations: For Medicine Tracker System in PHP version 1.0.0, update to a version that fixes the SQL Injection issue, however at...

Medicine Tracker System 跨站脚本漏洞

Medicine Tracker System is a drug tracking system by Carlo Montero Personal Developer. A security vulnerability exists in Medicine Tracker System version 1.0.0. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...

PT-2023-22542 · Unknown · Medicine Tracker System

Name of the Vulnerable Software and Affected Versions: Medicine Tracker System in PHP version 1.0.0 Description: The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can be exploited by attackers to inject malicious scripts into a website. No informatio...

Medicine Tracker System 跨站脚本漏洞

Medicine Tracker System is a drug tracking system by Carlo Montero Personal Developer. A security vulnerability exists in Medicine Tracker System version 1.0.0. An attacker could exploit this vulnerability to conduct a cross-site scripting attack via page=about...

npm rails-routes-to-json 命令注入漏洞

npm rails-routes-to-json is a library from the US-based npm. A security vulnerability exists in npm rails-routes-to-json v1.0.0, which stems from the discovery of a remote code execution RCE vulnerability contained via the childprocess function...

modoboa-automua (=1.0.0) potentially affected by CVE-2023-2228 via modoboa (=1.17.0)

modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-2228 Source advisory: OSV:PYSEC-2023-36...

Easy Ad Manager <= 1.0.0 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Snippet Box 跨站脚本漏洞

Snippet Box is a simple self-hosted application for pawelmalak individual developers. It is used to organize code snippets. A security vulnerability exists in Snippet-box version 1.0.0. An attacker can exploit the vulnerability to see arbitrary web script or HTML in the "Snippet code" form field...