266 matches found
Malicious code in riyanto-123 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce3d7ef3612a0e7ea2dab5d367b480bcb8a85121a21229686e82d3240d9461f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-147415
Malicious code in tusaaya-sdss-123 npm...
MAL-2025-169397 Malicious code in tusaaya-sdss-123 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faab92fd4f8c96a61ac871fa299250c5f77c4080695254f66b1c9fb0bff2edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-61456
A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...
EUVD-2025-35051
A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...
EUVD-2025-35046
A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoint. Unsanitized input in the /search parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...
CVE-2025-61456
A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...
CVE-2025-61455
SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the signup.inc.php endpoint. The application directly incorporates unsanitized user inputs into SQL queries, allowing unauthenticated attackers to bypass authentication and gain full access...
CVE-2025-61454
A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoint. Unsanitized input in the /search parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...
CVE-2025-61455
CVE-2025-61455 describes a SQL Injection in the E-commerce project (v1.0) signup.inc.php, caused by directly using unsanitized user input in SQL queries. The vulnerability enables unauthenticated authentication bypass and full backend access; the exposed parameter is typically the email field wit...
CVE-2025-61454
CVE-2025-61454 is an XSS vulnerability in the /search endpoint of Bhabishya-123 E-commerce 1.0. Unescaped input in the search parameter is directly reflected into the HTML response, allowing an attacker to execute arbitrary JavaScript in a user’s browser when a malicious link or crafted request i...
CVE-2025-61456
The CVE-2025-61456 entry documents a reflected XSS in Bhabishya-123 E-commerce 1.0, specifically in the index endpoint. Unescaped input from the /index parameter is echoed into the HTML response, enabling arbitrary JavaScript execution in a user’s browser via a crafted link or request. Affected p...
CVE-2025-61454
A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoint. Unsanitized input in the /search parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...
CVE-2025-61456
A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...
CVE-2025-61454
A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoint. Unsanitized input in the /search parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...
OESA-2025-2402 libtiff security update
This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...
EUVD-2006-0425
Malware in sbrugna...
EUVD-2010-0165
Malware in sbrugna...