MAL-2025-15988 Malicious code in bootstrap-brane-xo-rest (npm)

The package bootstrap-brane-xo-rest was found to contain malicious code...

MAL-2025-39908 Malicious code in xo-react (npm)

The package xo-react was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 4e894f1b9dae05a3bed6a449b72aa80ec41140feda0bb1bd926380239e701886 This package installs a dependency hosted on a custom domain that runs an info...

MAL-2025-39911 Malicious code in xo-typescript (npm)

The package xo-typescript was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c508442ceff167e8877a2a098d7b10d4efae92ff3a43987dc031b12771954a4c This package installs a dependency hosted on a custom domain that runs an...

Malicious code in xo-angular-ui-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6679 Malicious code in xo-angular-ui-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2021-47647

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: fix PCI-E clock oops Fix PCI-E clock related kernel oops that are caused by a missing clock parent. pcie0rchngclksrc has numparents set to 2 but only one parent is actually set via parenthws, it should also ha...

WordPress XO Slider plugin <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin XO Slider versions = 3.8.6...

CVE-2024-8324

The XO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘getslider’ function in all versions up to, and including, 3.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

CVE-2024-8324 XO Slider <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The XO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘getslider’ function in all versions up to, and including, 3.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

WordPress XO Slider Plugin <= 3.8.6 is vulnerable to Cross Site Scripting (XSS)

Software XO Slider Type Plugin Vulnerable versions = 3.8.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8324 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 959a1f9fef5b Credits Francesco Carlucci Required...

CVE-2024-8324: Improper Neutralization of Input During Web Page Generation

The XO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘getslider’ function in all versions up to, and including, 3.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

PT-2024-38939 · WordPress · Xo Slider

Name of the Vulnerable Software and Affected Versions: XO Slider plugin for WordPress versions up to, and including, 3.8.6 Description: The issue is related to Stored Cross-Site Scripting via the get slider function due to insufficient input sanitization and output escaping. This allows...

WordPress plugin XO Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

Malicious code in xo-page-test-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11d1c570ca1f162deccd278919172fec0695d65f640b2365daebdc2dfa0d998d The OpenSSF Package Analysis project identified 'xo-page-test-components' @ 99.2.9 npm as malicious. It is considered malicious because: - The...

MAL-2024-1167 Malicious code in xo-page-test-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11d1c570ca1f162deccd278919172fec0695d65f640b2365daebdc2dfa0d998d The OpenSSF Package Analysis project identified 'xo-page-test-components' @ 99.2.9 npm as malicious. It is considered malicious because: - The...

Malicious code in xo-page-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a11329bbae977cd57e3d9e774105ce918aef5ff74bfec87f9c470dba87bed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1033 Malicious code in xo-page-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a11329bbae977cd57e3d9e774105ce918aef5ff74bfec87f9c470dba87bed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory for golang-github-xo-terminfo (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-xo-terminfo-0-0.7.20210113gitc22d04b.fc36

A terminfo package in pure go!...

Fedora: Security Advisory for golang-github-xo-terminfo (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...