Malicious Package

Overview ys-mozi-metrics is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

ys-eng.jp Cross Site Scripting vulnerability OBB-1383684

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Enquete yS 1.0 SQL Injection Vulnerability

Enquete yS version 1.0 suffers from a remote SQL injection vulnerability. Enquete yS - Full v. 1.0 POST SQL Injection in Panel Admin Risk: High CWE number: CWE-89 Author: Hugo Santiago dos Santos Contact: email protected Date: 08/05/2014 Vendor Homepage:...

Unfixed XSS vulnerability at www.job.com.my

Security researcher YS, has submitted on 29/03/2008 a cross-site-scripting XSS vulnerability affecting www.job.com.my, which at the time of submission ranked 2132652 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is currently...

Unfixed XSS vulnerability at free-software-now.com

Security researcher YS, has submitted on 28/03/2008 a cross-site-scripting XSS vulnerability affecting free-software-now.com, which at the time of submission ranked 129357 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...

Unfixed XSS vulnerability at free-software-now.com

Security researcher YS, has submitted on 28/03/2008 a cross-site-scripting XSS vulnerability affecting free-software-now.com, which at the time of submission ranked 117080 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/03/2008. It is...

WYYS 1.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24117/info WÝYS is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be...