Ngrok Detected

This is an informational notice that the scanner was able to detect an Ngrok tunneling service to access the target web application. Note that this detection is included in the Remote Access Tools category. No source data...

MAL-2025-2232 Malicious code in cb4good (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c16e1ebf21c15491517654d93507f4ac7ca8aa96e47403f10fd753ef7bcbca95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2231 Malicious code in @partner-tech/pax-illustrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 59fd97ac6b88180973bc6765a95cc0730d5de2879c68c3d7d29dda4531b7fbec The OpenSSF Package Analysis project identified '@partner-tech/pax-illustrations' @ 99.99.106 npm as malicious. It is considered malicious...

Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, gain control over the products, or impersonate the web applications. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...

The vulnerability in the DNN CMS system’s script execution scenario /Activity-Feed/userId/{user_id}, which allows a attacker to perform XSS attacks.

Vulnerability of the DNN CMS system’s /Activity-Feed/userId/userid endpoint: no measures taken to protect the website structure. Exploitation of this vulnerability allows a malicious actor to perform XSS attacks remotely...

CVE-2025-20923

Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege...

CVE-2024-13668

The WordPress Activity O Meter WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admins...

CVE-2024-13668 WordPress Activity O Meter <= 1 - Reflected XSS

The WordPress Activity O Meter WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admins...

WordPress plugin WordPress Activity O Meter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2025-20923

Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege...

CVE-2025-20923

CVE-2025-20923 : Affects Galaxy Wearable. The issue is an access control flaw in Galaxy Wearable prior to version 2.2.61.24112961, allowing local attackers to launch arbitrary activities with Galaxy Wearable privileges. The vulnerability is described as an improper access control error; no exploi...

CVE-2025-20923

Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege...

Malicious code in opstooling-js-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b11b3f4ae62b5020e45db0bb5c8c20d6e3ed369a002264afcac1d2ab34476fd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-41613

creationtimestamp| type| source ---|---|--- 2025-03-06 02:17:23+00:00| seen| Telegram/xGi9zBrNoLO9QDKDGLVcQXonIX5gNWe3gepahfOL0wSQ4xdv...

Malicious code in certifications (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7d51c9defecdd382c5048eb6f92b32558355b8457b2b5cd63f3d86e12e8ed35b Package contains a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-03-certifications...

MAL-2025-2151 Malicious code in dexter-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af68f212ffdb2522ba261549728dc70fe8cb18c52beaed06290818706c688606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in migrate-npm-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e88d87096c208b4f54619b9977a873f533856db5cc436e42261a8e9254e162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adminauthserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01fbeb3da8a3ec0a1c93f3ff5431e6be6693f2a2e13482834637f2b73e99d13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in connector123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4261abe09f2e4b03b147c1ead2f47890e02c3a6566f7b8d5feec8ead8c00737a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2069 Malicious code in connector-colaborator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6b36fb73f95f45f84f970f686c6e99ac696443d4011ed8949a09ba012e27336 The OpenSSF Package Analysis project identified 'connector-colaborator' @ 1.0.0 npm as malicious. It is considered malicious because: - The...