Malicious code in code-code-old-reject-cat (npm)

Source: amazon-inspector c899170e707048f7a4cca5c47d5b69c5e973289a723f30a8f0ca015ae5d82005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-179689

Malicious code in code-code-old-reject-cat npm...

PT-2018-18602

Name of the Vulnerable Software and Affected Versions Kontena versions prior to 1.5.0 Description The issue allows for XSS in the "kontena master login --remote" code display. This can be demonstrated by using the /codecode= endpoint in a URI. Recommendations For versions prior to 1.5.0, update t...

CVE-2016-2796: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite...

PT-2016-1423

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 Description The issue is related to a heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function. This can be...

VuFind 1.0 Cross Site Scripting

VuFind 1.0 Web Application Reflected XSS Cross-site Scripting 0-Day Bug Security Issue Exploit Title: VuFind Results? &lookfor parameter Reflected XSS Web Security Vulnerability Product: VuFind Vendor: VuFind Vulnerable Versions: 1.0 Tested Version: 1.0 Advisory Publication: September 20, 2015...

CVE-2011-0084

The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute...