Malicious code in 0e (npm)

Source: amazon-inspector 71d3f3352259e4eb03352ae7be99bea6511ba3092aeb42a62c5ede4fb82dd614 a static rule a static pattern match critical flagged index.js for containing a Telegram bot token, chatid, sendMessage endpoint, a console Proxy wrapper, and JSON.stringify — the canonical shape of a...

CVE-2018-10081

CMS Made Simple CMSMS through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring...

CVE-2023-53894

phpfm 1.7.9 contains an authentication bypass vulnerability that allows attackers to log in by exploiting loose type comparison in password hash validation. Attackers can craft specific password hashes beginning with 0e or 00e to bypass authentication and upload malicious PHP files to the server...

CVE-2023-53894

phpfm 1.7.9 contains an authentication bypass vulnerability that allows attackers to log in by exploiting loose type comparison in password hash validation. Attackers can craft specific password hashes beginning with 0e or 00e to bypass authentication and upload malicious PHP files to the server...

Malicious code in 0e (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d3f3352259e4eb03352ae7be99bea6511ba3092aeb42a62c5ede4fb82dd614 a static rule a static pattern match critical flagged index.js for containing a Telegram bot token, chatid, sendMessage endpoint, a console Proxy...

EUVD-2025-38564

Malicious code in 0e npm...

MAL-2025-49456 Malicious code in 0e (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d3f3352259e4eb03352ae7be99bea6511ba3092aeb42a62c5ede4fb82dd614 a static rule a static pattern match critical flagged index.js for containing a Telegram bot token, chatid, sendMessage endpoint, a console Proxy...

CVE-2020-8547

phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...

CVE-2018-10081

CMS Made Simple CMSMS through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring...