Input passed to the GET parameter 'action' is not properly sanitized before being returned to the user. The affected version is 0.1.0.ĮTAP Lighting International NV ETAP Safety Manager 1.0.0.32 is vulnerable to Cross Site Scripting (XSS). The backdoor is the democritus-urls package. The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0.Ī cross-site scripting (XSS) vulnerability in TotalJS commit 8c2c8909 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website name text field under Main Settings. The backdoor is the democritus-html package. The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a file name. PfSense v2.5.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the browser.php component.

Android studio beta v0.8.14