Malicious code in andi-takokak49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a35bcb3f4dc59af64d5b969b0d90fcdd89b90f9197b84562781b11397ef0d6 The package andi-takokak49-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in candra-tiwul20-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e10ff0d3a0d0d1aae0c46925243fafb86fc8a48acc633987ee806b98b897141 The package candra-tiwul20-apidev was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in ade-sate1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85b8b2d4ec997f4179c6deca76078664e502a43fdc82ab564fa42d71ad8d5b6 The package ade-sate1-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded np...

Malicious code in dono-kue76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 813fa1ed62f9149e8152cf6bacbe85ea9aa3be51dfb72707c97531d6cecc74ee The package dono-kue76-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

Malicious code in budi-lutis83-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434c78453cc63e02969cc7c5196fc8368f3e1905becb995eb6d555ed5cfecb95 The package budi-lutis83-remi was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50659 Malicious code in vida-sego26-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0462f8cbea853f62ade71423671e51aac033f7c2e5665a13803fed4a4ad12b2c The package vida-sego26-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in arif-serabi93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c428b65b3b3097d85d08f5c49f5a46676ebcac6d1cb69051e4d103b386e031db The package arif-serabi93-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-52387 Malicious code in tania-mangut17-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc24569c4fd93ae0c78bcb602d38d0984b6af17dc9726b32d5f717226068bc2 The package tania-mangut17-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

EUVD-2025-38722

A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controller/Product.php. This manipulation of the argument Title causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

SourceCodester Food Ordering System SQL Injection Vulnerability

SourceCodester Food Ordering System is a SourceCodester open source food ordering system. A SQL injection vulnerability exists in SourceCodester Food Ordering System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /routers/edit-orders.php, which could lead to ...

PT-2025-45600

A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-12931: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-12920

A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controller/Product.php. This manipulation of the argument Title causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-12920

A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controller/Product.php. This manipulation of the argument Title causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-12920

FoxCMS up to 1.2.16 contains a cross-site scripting vulnerability in the add/edit path (app/admin/controller/Product.php, Title parameter). The issue can be triggered remotely and an exploit has been published; vendor did not respond. Affected versions should be updated to mitigate; as a workarou...

PT-2025-45582

Name of the Vulnerable Software and Affected Versions qianfox FoxCMS versions up to 1.2.16 Description A cross-site scripting issue exists in the add/edit function of the app/admin/controller/Product.php file. Manipulation of the Title argument can trigger this issue. The attack can be initiated...

CVE-2025-12859

A vulnerability has been found in DedeBIZ up to 6.3.2. This impacts an unknown function of the file /admin/templetsoneedit.php. The manipulation of the argument ids leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used...

CVE-2025-63785

A DOM-based Cross-Site Scripting XSS vulnerability exists in the text editor feature of the Onlook web application 0.2.32. This vulnerability occurs because user-supplied input is not properly sanitized before being directly injected into the DOM via innerHTML when editing a text element. An...

EUVD-2025-38272

A Broken Object Level Authorization BOLA vulnerability was discovered in the tRPC project mutation APIs update, delete, add/remove tag of the Onlook web application 0.2.32. The vulnerability exists because the API fails to verify the ownership or membership of the currently authenticated user for...

CVE-2025-12859

A vulnerability has been found in DedeBIZ up to 6.3.2. This impacts an unknown function of the file /admin/templetsoneedit.php. The manipulation of the argument ids leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used...