200 matches found
wix-kickstartx-challenge-writeup
Wix KickstartX 挑战赛 2026 — 完整 Writeup 结果: 200/200 100% — Token: WKX-9245FA70-200 日期: 2026年3月24日 1. 发现与侦察 挑战公告 LinkedIn 上的一篇帖子宣布了 Wix KickstartX 的一项特别挑战——一个面向初级开发者的项目。 规则如下： 30 分钟，只有一次机会 得分最高的前 10 名直接晋级考试阶段 提供了两个链接：wix-kickstartx-challenge-2026.base44.app/ 和 wixkickstart.com 找到挑战入口 主站点...
This fake Windows support website delivers password-stealing malware
A fake Microsoft support website is tricking people into downloading what looks like a normal Windows update. Instead, it installs malware designed to steal passwords, payment details, and account access. Because the file looks legitimate and avoids detection, it can slip past both users and...
CVE-2026-2276
Reflected Cross-Site Scripting XSS vulnerability in the Wix web application, where the endpoint ' https://manage.wix.com/account/account-settings ', responsible for uploading SVG images, does not properly sanitize the content. An authenticated attacker could upload an SVG file containing embedded...
CVE-2026-2276
Reflected Cross-Site Scripting XSS vulnerability in the Wix web application, where the endpoint ' https://manage.wix.com/account/account-settings ', responsible for uploading SVG images, does not properly sanitize the content. An authenticated attacker could upload an SVG file containing embedded...
CVE-2026-2276 Reflected Cross-Site Scripting in the Wix web application
Reflected Cross-Site Scripting XSS vulnerability in the Wix web application, where the endpoint ' https://manage.wix.com/account/account-settings ', responsible for uploading SVG images, does not properly sanitize the content. An authenticated attacker could upload an SVG file containing embedded...
CVE-2026-2276
CVE-2026-2276 describes a reflected XSS in Wix’s web app where uploading SVGs to the endpoint https://manage.wix.com/account/account-settings permits embedded JavaScript execution after storage. Authenticated users could upload crafted SVG content; when others view the image, script executes in t...
CVE-2026-2276 Reflected Cross-Site Scripting in the Wix web application
Reflected Cross-Site Scripting XSS vulnerability in the Wix web application, where the endpoint ' https://manage.wix.com/account/account-settings ', responsible for uploading SVG images, does not properly sanitize the content. An authenticated attacker could upload an SVG file containing embedded...
CVE-2026-2276
Reflected Cross-Site Scripting XSS vulnerability in the Wix web application, where the endpoint ' https://manage.wix.com/account/account-settings ', responsible for uploading SVG images, does not properly sanitize the content. An authenticated attacker could upload an SVG file containing embedded...
PT-2026-7835
Name of the Vulnerable Software and Affected Versions Wix affected versions not specified Description A Reflected Cross-Site Scripting XSS issue exists in the Wix web application. The vulnerability is located in the SVG image upload functionality at the...
Wix 跨站脚本漏洞
Wix is a website building platform provided by the Israeli company Wix. Wix has a cross-site scripting vulnerability, which stems from the improper cleanup of content by the endpoint responsible for uploading SVG images. This vulnerability may lead to reflective cross-site scripting attacks...
CVE-2026-2276: Improper Neutralization of Input During Web Page Generation
Reflected Cross-Site Scripting XSS vulnerability in the Wix web application, where the endpoint ' https://manage.wix.com/account/account-settings ', responsible for uploading SVG images, does not properly sanitize the content. An authenticated attacker could upload an SVG file containing embedded...
CVE-2019-16511
An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file even with a ../ sequence is...
📄 WIX.com Cross Site Scripting
WIX.com appears to suffer from a cross site scripting vulnerability. The researcher contacted them months ago and they have ignored his report, so we are posting this to encourage them to address it and to let their users know that they could be affected by this vulnerability. Titles: WIX.com /...
@vdart-code/web (1.19.0), @wix/cloud-provider-fetch-adapter (>=1.0.1, <=1.0.5) +9 more potentially affected by CVE-2025-64757 via @astrojs/cloudflare (>=12.5.5, <=12.6.6)
@astrojs/cloudflare NPM version =12.5.5, =1.0.1, =0.37.0, =0.37.0, =0.32.7, =0.32.7, =0.32.7, =0.1.0, =0.1.0, =0.2.1, =0.2.1, =0.2.4 Source cves: CVE-2025-64757 Source advisory: SNYK:JS-ASTROJSCLOUDFLARE-14059140...
EUVD-2019-7188
Malware in sbrugna...
EUVD-2023-2051
Malicious code in bioql PyPI...
EUVD-2025-12353
Malicious code in bioql PyPI...
EUVD-2024-1002
Malicious code in bioql PyPI...