MAL-2025-35327 Malicious code in test-mlw2-fetas-dight (npm)

The package test-mlw2-fetas-dight was found to contain malicious code...

CVE-2020-35327

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...

CVE-2022-35327

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2022-35327

CVE-2022-35327 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2022-35327

...

TOTOLINK Technology Router Authentication Bypass (CVE-2021-35327)

An authentication bypass vulnerability exists in TOTOLINK Technology Router. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

CVE-2021-35327

The CVE-2021-35327 entry concerns Totolink A720R routers (firmware v4.1.5cu.470_B20200911). Affected component: Telnet service authentication; root cause: improper handling allowing Telnet to start and login with default credentials via a crafted POST request. Reported impact: attacker could gain...

CVE-2020-35327

creationtimestamp| type| source ---|---|--- 2021-03-04 18:46:33+00:00| seen| Telegram/SnVQ-IjFrdFgmwhahlLg2mAWi2hSecuMWqUh3GsMaT9rkc...

CVE-2020-35327

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...

CVE-2020-35327

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...

CVE-2020-35327

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...

CVE-2020-35327

CVE-2020-35327 affects Courier Management System 1.0. The vulnerability is an SQL injection in the ref_no parameter (POST) to admin_class.php. Root cause: unsanitized input in the SQL query leads to unauthorized data access; CVSS 3.1 vector shows network attack with low complexity and privileges ...

hodinkee.com XSS vulnerability

Vulnerable URL: https://www.hodinkee.com/search?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35327 VIP website status:| Yes Check hodinkee.com SSL connection:| Grade: A...