MAL-2024-12152 Malicious code in lfs-au-website-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1cede85f63ef726a200198c527060cd81e0506a726fc5ad92ce154a3873e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-12393

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Core allows Cross-Site Scripting XSS.This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8...

Adobe Connect input validation vulnerability

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. An input validation error vulnerability exists in Adobe Connect, which stems from the system's failure to appropriately handle target jumps, and can be exploited by an attacker to redirect a use...

CVE-2023-50373

creationtimestamp| type| source ---|---|--- 2024-12-09 14:16:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113623288225669071...

U.S. Dept Of Defense: XSS vulnerability found in javascript code of https://███.mil

The XSS vulnerability was found in the JavaScript code of the website https://███.mil. The parameter "code" was not sufficiently sanitized, allowing the injection of malicious code. This vulnerability could have been exploited to execute arbitrary scripts in the context of the affected website...

CVE-2024-11010: Improper Limitation of a Pathname to a Restricted Directory

The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.1.4 via the 'defaultlang' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, ...

SUSE-SU-2024:4253-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.5.1 ESR: - Fixed: Fixed an issue that prevented some websites from loading when using SSL Inspection. bmo1933747...

GitLab DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a service failure using a speciall...

Nextcloud Server DoS

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to the lack of protective measures for the website structure. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

GitLab XSS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

PT-2024-41016

Name of the Vulnerable Software and Affected Versions MozillaFirefox versions prior to Extended Support Release 128.5.1 ESR Description The issue prevented some websites from loading when using SSL Inspection. Recommendations For versions prior to Extended Support Release 128.5.1 ESR, update to...

CVE-2024-54014

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device...

PT-2024-36015

Name of the Vulnerable Software and Affected Versions: Skylark App for Android versions 6.2.13 and earlier Skylark App for iOS versions 6.2.13 and earlier Description: The issue is related to improper authorization in the handler for a custom URL scheme, allowing an attacker to lead the applicati...

aef-gw (>=0.1.1, <=0.1.15), an-website (24.12.0) +15 more potentially affected by CVE-2024-53861 via pyjwt (2.10.0)

pyjwt PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aef-gw =0.1.1, =2024.4.1, =0.5.0, =0.1.14, =0.180.0, =0.0.8, =0.1.10, =1.6.1, =0.1.4, =0.1.2, =0.1.5 and more Source cves: CVE-2024-53861 Source...

aef-gw (>=0.1.1, <=0.1.15), an-website (24.12.0) +15 more potentially affected by CVE-2024-53861 via pyjwt (2.10.0)

pyjwt PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aef-gw =0.1.1, =2024.4.1, =0.5.0, =0.1.14, =0.180.0, =0.0.8, =0.1.10, =1.6.1, =0.1.4, =0.1.2, =0.1.5 and more Source cves: CVE-2024-53861 Source...

Microsoft Dynamics 365 Spear Phishing

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute a spear-phishing attack remotely...

aef-gw (>=0.1.1, <=0.1.15), an-website (24.12.0) +15 more potentially affected by CVE-2024-53861 via pyjwt (2.10.0)

pyjwt PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aef-gw =0.1.1, =2024.4.1, =0.5.0, =0.1.14, =0.180.0, =0.0.8, =0.1.10, =1.6.1, =0.1.4, =0.1.2, =0.1.5 and more Source cves: CVE-2024-53861 Source...

aef-gw (>=0.1.1, <=0.1.15), an-website (24.12.0) +15 more potentially affected by CVE-2024-53861 via pyjwt (2.10.0)

pyjwt PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aef-gw =0.1.1, =2024.4.1, =0.5.0, =0.1.14, =0.180.0, =0.0.8, =0.1.10, =1.6.1, =0.1.4, =0.1.2, =0.1.5 and more Source cves: CVE-2024-53861 Source...

VMware Aria Operations Monitoring XSS

The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

VMware Aria Operations Monitoring XSS

The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...