89 matches found
Malicious code in yapi-to-dts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19ac9578e805bf62c4ef65a0db4a50d37e5fa4953caa1e4774265c4f5d86277a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12063 Malicious code in yapi-to-dts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19ac9578e805bf62c4ef65a0db4a50d37e5fa4953caa1e4774265c4f5d86277a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11047 Malicious code in json-schema-editor-visual-yapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2c434b89e0272562d45ccf56680fe4b6edf72651ddb2603233fa84ad67bf2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in yapi-plugin-games-google-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50fd58da7aed5c7f4b93b71f00b778b524976db87da82ad0c037d021e2197649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11021 Malicious code in yapi-plugin-games-google-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50fd58da7aed5c7f4b93b71f00b778b524976db87da82ad0c037d021e2197649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-33831
A stored cross-site scripting XSS vulnerability in the Advanced Expectation - Response module of yapi v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the body field...
CVE-2024-33831
A stored cross-site scripting XSS vulnerability in the Advanced Expectation - Response module of yapi v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the body field...
CVE-2024-33831
The yapi v1.10.2 visual interface management platform contains a stored cross-site scripting (XSS) vulnerability in the Advanced Expectation - Response module. The root cause is insufficient input validation , which allows an attacker to inject a crafted payload into the body field to execute arb...
CVE-2024-33831: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
A stored cross-site scripting XSS vulnerability in the Advanced Expectation - Response module of yapi v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the body field...
CVE-2024-33831
A stored cross-site scripting XSS vulnerability in the Advanced Expectation - Response module of yapi v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the body field...
PT-2024-25502 · Yapi · Yapi
Name of the Vulnerable Software and Affected Versions: yapi version 1.10.2 Description: A stored cross-site scripting XSS vulnerability in the Advanced Expectation - Response module allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the body field...
yapi 安全漏洞
YMFE YApi is a visual interface management platform from YMFE, Inc. A security vulnerability exists in yapi version v1.10.2, which stems from the presence of a stored cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or HTML by injecting a crafted...
Cross-site Scripting in yapi-vendor
Cross Site Scripting XSS vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page...
GHSA-4JQW-VFMJ-9RMH Cross-site Scripting in yapi-vendor
Cross Site Scripting XSS vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page...
CVE-2021-36686
Cross Site Scripting XSS vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page...
CVE-2021-36686
Cross Site Scripting XSS vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page...
Cross site scripting
Cross Site Scripting XSS vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page...
YMFE YApi 跨站脚本漏洞
YMFE YApi is a visual interface management platform from YMFE Corporation. A security vulnerability exists in YMFE YApi version 1.9.1. An attacker can exploit this vulnerability to execute arbitrary code via the /interface/api edit page...
PT-2023-12296 · Yapi · Yapi
Name of the Vulnerable Software and Affected Versions: yapi version 1.9.1 Description: A Cross Site Scripting XSS issue allows attackers to execute arbitrary code via the "interface/api" edit page. Recommendations: For yapi version 1.9.1, update to a newer version that contains a fix for this iss...