MAL-2025-38886 Malicious code in watermelon-ymh-project (npm)

The package watermelon-ymh-project was found to contain malicious code...

CVE-2024-38886

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Traffic Injection attack due to improper verification of the source of a communication channel...

CVE-2023-38886

An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script...

CVE-2022-38886

The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

CVE-2024-38886

creationtimestamp| type| source ---|---|--- 2024-08-02 20:42:29+00:00| seen| https://t.me/cvedetector/2366...

CVE-2023-38886

creationtimestamp| type| source ---|---|--- 2023-09-20 08:08:22+00:00| seen| https://t.me/cibsecurity/70773...

CVE-2023-38886

An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script...

CVE-2023-38886

Dolibarr ERP CRM v17.0.1 and earlier is affected by CVE-2023-38886, enabling a remote authenticated attacker with high privileges to execute arbitrary code via a crafted command/script. The vulnerability is associated with a CVSS v3.1 base score of 7.2 (High) with network attack vector, low compl...

CVE-2022-38886

creationtimestamp| type| source ---|---|--- 2022-09-19 20:38:00+00:00| seen| https://t.me/cibsecurity/50049...

CVE-2022-38886

The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

CVE-2022-38886

The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

CVE-2022-38886

CVE-2022-38886 affects the Python package d8s-xml distributed on PyPI. The vulnerability stems from a third‑party backdoor in the package ecosystem, specifically the democritus-strings package, with the affected release identified as version 0.1.0. This backdoor enables potential remote code exec...

CVE-2021-38886

creationtimestamp| type| source ---|---|--- 2022-04-22 20:28:05+00:00| seen| https://t.me/cibsecurity/41334...