PT-2024-10229 · Drupal · Drupal Tooltip

Name of the Vulnerable Software and Affected Versions: Drupal Tooltip versions 0.0.0 through 1.1.2 Description: The issue is related to improper neutralization of input during web page generation, which allows Cross-Site Scripting XSS attacks. This can be exploited by a remote attacker to conduct...

CVE-2024-21510

Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host XFH header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into...

PT-2025-2105 · Drupal · Ohdear Integration

Name of the Vulnerable Software and Affected Versions: OhDear Integration versions 0.0.0 through 2.0.3 Description: The issue is related to incorrect authorization in the OhDear Integration module for Drupal, allowing forceful browsing. This can enable a remote attacker to access confidential...

PT-2025-2101 · Drupal · Drupal Svg Embed

Name of the Vulnerable Software and Affected Versions: Drupal SVG Embed versions 0.0.0 through 2.1.2 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-Site Scripting XSS attacks. This allows a remote attacker to conduct XSS...

PT-2025-2091 · Drupal · Drupal Security Kit

Name of the Vulnerable Software and Affected Versions: Drupal Security Kit versions 0.0.0 through 2.0.2 Description: The issue is related to a 'Type Confusion' vulnerability, which allows an attacker to cause a denial of service via HTTP. This vulnerability can be exploited by a remote attacker...

PT-2024-10350 · Unknown · Opigno Learning Path

Name of the Vulnerable Software and Affected Versions: Opigno Learning path versions 0.0.0 through 3.1.2 Description: The issue is related to improper neutralization of directives in statically saved code, also known as 'static code injection', which allows for PHP Local File Inclusion. This can...

Malicious code in sap-boards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f03ca612a15163c77abfa2590e258d664e33bc5d26670a73d6affe79ae0c8b7 The OpenSSF Package Analysis project identified 'sap-boards' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-amt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac0b22abb922cfcbd678374792b3ced84f89c8a2718bf13159ecb5c147213259 The OpenSSF Package Analysis project identified 'sap-amt' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in sap-category (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a75ba0843d7dc2bd9dc65a40834751664a0673576a268a29f67b5d8a9037ce39 The OpenSSF Package Analysis project identified 'sap-category' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-browse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fff207eb067e174df855bfc2fc30bfa1531178d9ff3f3b24e456b5b362212e0e The OpenSSF Package Analysis project identified 'sap-browse' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-bansubmit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 664cf3f60e2c115fffdbd1b6ffba703a11a350f2cbe60e03083cdabb8c373824 The OpenSSF Package Analysis project identified 'sap-bansubmit' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-authorname (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49f6a7dcc6ffdad141171d897bd68b41d79e097dbbfc7e91edce937aa5d5444d The OpenSSF Package Analysis project identified 'sap-authorname' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-autofocus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e15f13dd2b2789c1e248b55c796edd0c2601ce0327cb603516089a92553c64b The OpenSSF Package Analysis project identified 'sap-autofocus' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-assignmentform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 08aacf1067cdef362e4c9fc7d8498f96906f4d0c1ca192414050f1e92ff480de The OpenSSF Package Analysis project identified 'sap-assignmentform' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-artisttitledupes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 43a68bfe6b28165a13f4a7279e7d977162a58338e92ea924cee372290a421c49 The OpenSSF Package Analysis project identified 'sap-artisttitledupes' @ 0.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in sap-appname (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 248b7983c96f3b6b1d22995cb7f53ccbbab7c08f39c25ea24f10f8922980a0e6 The OpenSSF Package Analysis project identified 'sap-appname' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-apikey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb8fd3ec31e8b463a6693640ad63d0daa3ec8d6ab786d3c92b8b0b713dddeec6 The OpenSSF Package Analysis project identified 'sap-apikey' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-anon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 710673a02482ab1c70dd35a40525478055d2f61cc3c9ec55a813044c6cca0315 The OpenSSF Package Analysis project identified 'sap-anon' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-always (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5b6d3b5acd9b98712bf1b1c0babd85de045245395e42d961a8cfd6f3fab49662 The OpenSSF Package Analysis project identified 'sap-always' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-aim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 244887dfb793a534f8315571ac4ce6a3f97aa3a4177470d47fd5ce38563548e6 The OpenSSF Package Analysis project identified 'sap-aim' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...