ebram_web_scanner

EBRAM Web Scanner EBRAM Web Scanner is a powerful Python-ba...

graphql-playground

This repository is an offensive tool for GraphQL. It is a GraphQL IDE for better development workflows, featuring context-aware autocompletion and error highlighting, interactive, multi-column docs, and support for real-time GraphQL Subscriptions. The tool is vulnerable to an XSS Reflection attac...

Malicious code in local-release-it-exec-graphql (npm)

The package local-release-it-exec-graphql was found to contain malicious code...

Malicious code in magellan-ignite-graphql-innercore (npm)

The package magellan-ignite-graphql-innercore was found to contain malicious code...

Malicious code in polaris-node-config-graphql-xml (npm)

The package polaris-node-config-graphql-xml was found to contain malicious code...

Malicious code in scripts-mysql-package-graphql (npm)

The package scripts-mysql-package-graphql was found to contain malicious code...

Malicious code in registry-library-registry-graphql (npm)

The package registry-library-registry-graphql was found to contain malicious code...

MAL-2025-45784 Malicious code in registry-library-registry-graphql (npm)

The package registry-library-registry-graphql was found to contain malicious code...

MAL-2025-45980 Malicious code in scripts-mysql-package-graphql (npm)

The package scripts-mysql-package-graphql was found to contain malicious code...

MAL-2025-45057 Malicious code in local-release-it-exec-graphql (npm)

The package local-release-it-exec-graphql was found to contain malicious code...

Malicious code in subscription-draco-writable-graphql (npm)

The package subscription-draco-writable-graphql was found to contain malicious code...

MAL-2025-46159 Malicious code in subscription-draco-writable-graphql (npm)

The package subscription-draco-writable-graphql was found to contain malicious code...

MAL-2025-45575 Malicious code in polaris-node-config-graphql-xml (npm)

The package polaris-node-config-graphql-xml was found to contain malicious code...

CVE-2025-55739 api: Shared OAuth Signing Key Between Different Instances

api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© PBX. In versions lower than 15.0.13, 16.0.2 through 16.0.14, 17.0.1 and 17.0.2, there is an identical OAuth private key used across multiple systems that installed the same FreePBX RPM or DEB package. An...

CVE-2025-55739

api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© PBX. In versions lower than 15.0.13, 16.0.2 through 16.0.14, 17.0.1 and 17.0.2, there is an identical OAuth private key used across multiple systems that installed the same FreePBX RPM or DEB package. An...

Linux Distros Unpatched Vulnerability : CVE-2022-37315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser. CVE-2022-37315 Note that Nessus relies on the presence of the...

graphql-java:GraphqlFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=5249590392848384 Project: graphql-java Fuzzing Engine: libFuzzer Fuzz Target: GraphqlFuzzer Job Type: libfuzzerasangraphql-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...

PT-2025-37109

Name of the Vulnerable Software and Affected Versions Foreman affected versions not specified Description An authorization issue exists in Foreman’s GraphQL API. Low-privileged users can access metadata that they should not be able to view. The GraphQL endpoint does not enforce access controls...

CVE-2025-2246

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have allowed unauthenticated users to access sensitive manual CI/CD variables by querying the GraphQL API...

CVE-2025-4225

An issue has been discovered in GitLab CE/EE affecting all versions from 14.1 before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that that under certain conditions could have allowed an unauthenticated attacker to cause a denial-of-service condition affecting all users by sending specially...