MAL-2025-38877 Malicious code in watermelon-vanilla-hotel-mrnkc (npm)

The package watermelon-vanilla-hotel-mrnkc was found to contain malicious code...

CVE-2022-38877

Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/phpaction/editProductImage.php?id=1...

Siemens Energy Omnivise T3000 8.2 SP3 Privilege Escalation / File Download

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Siemens Energy Omnivise T3000 vulnerable version: =8.2 SP3 fixed version: see solution section CVE number: CVE-2024-38876, CVE-2024-3887...

CVE-2024-38877

creationtimestamp| type| source ---|---|--- 2024-08-02 14:01:26+00:00| seen| https://t.me/cvedetector/2352 2024-11-13 04:03:41+00:00| seen| https://schleuss.online/users/vulnbot/statuses/113473658534013466...

CVE-2023-38877

creationtimestamp| type| source ---|---|--- 2023-09-28 07:46:41+00:00| seen| https://t.me/cibsecurity/71169...

CVE-2023-38877

Economizzer (gugoan) v0.9-beta1 and commit 3730880 are affected by a host header injection vulnerability in the password reset flow. The issue allows an attacker-controlled server to receive password reset tokens, enabling the attacker to reset other users’ passwords. Root cause described across ...

CVE-2022-38877

creationtimestamp| type| source ---|---|--- 2022-09-16 20:29:05+00:00| seen| https://t.me/cibsecurity/49935...

CVE-2022-38877

Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/phpaction/editProductImage.php?id=1...

CVE-2022-38877

Garage Management System v1.0 is affected by arbitrary code execution via the endpoint ip/garage/php_action/editProductImage.php?id=1. The issue stems from manipulating the id parameter exposed by that endpoint, allowing remote attackers to execute code. Exploitation details are present in multip...

CVE-2021-38877

IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting in the Web UI, potentially allowing an attacker to embed arbitrary JavaScript and cause credential disclosure in a trusted session. The vulnerability is identified as CVE-2021-38877. IBM/IBM X-Force references a...