Lucene search
+L

9427 matches found

vulnersOsv
vulnersOsv
•added 2025/10/08 11:32 p.m.•1 views

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=5.3.4-26.2, <=5.4.3-26.2), org.keycloak.testframework:keycloak-test-framework-core (26.2.5) +19 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.2.5)

org.keycloak:keycloak-model-storage-services MAVEN version 26.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =5.3.4-26.2,...

4.9CVSS0.00497EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/10/08 11:32 p.m.•1 views

org.keycloak:keycloak-dependencies-server-all (26.0.3) potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.0.3)

org.keycloak:keycloak-model-storage-services MAVEN version 26.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 26.0.3 Source cves:...

4.9CVSS0.00497EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/10/08 11:32 p.m.•1 views

org.keycloak.testframework:keycloak-test-framework-core (26.1.4), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.1.4) +17 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.1.4)

org.keycloak:keycloak-model-storage-services MAVEN version 26.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.1.4 -...

4.9CVSS0.00497EPSS
SaveExploits0
Snyk
Snyk
•added 2025/10/08 12:45 a.m.•10 views

Malicious Package

Overview redirect-a1gs61 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/08 12:45 a.m.•9 views

Malicious Package

Overview redirect-p8ris1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/08 12:45 a.m.•12 views

Malicious Package

Overview redirect-w9cx9u is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/08 12:45 a.m.•7 views

Malicious Package

Overview redirect-4iyfat is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/08 12:44 a.m.•10 views

Malicious Package

Overview vn-hrm is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/08 12:42 a.m.•5 views

Malicious Package

Overview webpack-loader-css-branch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/08 12:37 a.m.•10 views

Malicious Package

Overview nextjs-edge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/08 12:31 a.m.•9 views

Malicious Package

Overview vite-plugin-opticompress is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS6.8AI score
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/07 7:32 p.m.•6 views

CVE-2025-11406 kaifangqian kaifangqian-base SysUserController.java getAllUsers information disclosure

A security flaw has been discovered in kaifangqian kaifangqian-base up to 7b3faecda13848b3ced6c17c7423b76c5b47b8ab. This issue affects the function getAllUsers of the file kaifangqian-parent/kaifangqian-system/src/main/java/com/kaifangqian/modules/system/controller/SysUserController.java. The...

5.3CVSS5.1AI score0.00262EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 7:32 p.m.•13 views

EUVD-2025-32889

A security flaw has been discovered in kaifangqian kaifangqian-base up to 7b3faecda13848b3ced6c17c7423b76c5b47b8ab. This issue affects the function getAllUsers of the file kaifangqian-parent/kaifangqian-system/src/main/java/com/kaifangqian/modules/system/controller/SysUserController.java. The...

5.3CVSS6.2AI score0.00262EPSS
SaveExploits0References4
CVE
CVE
•added 2025/10/07 7:32 p.m.•18 views

CVE-2025-11406

CVE-2025-11406 affects kaifangqian-base; the flaw is in SysUserController.getAllUsers (kaifangqian-parent/kaifangqian-system/src/main/java/com/kaifangqian/modules/system/controller/SysUserController.java). It enables information disclosure via remote manipulation; exploits have been released publ...

5.3CVSS5.1AI score0.00262EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/10/07 7:32 p.m.•29 views

CVE-2025-11406 kaifangqian kaifangqian-base SysUserController.java getAllUsers information disclosure

A security flaw has been discovered in kaifangqian kaifangqian-base up to 7b3faecda13848b3ced6c17c7423b76c5b47b8ab. This issue affects the function getAllUsers of the file kaifangqian-parent/kaifangqian-system/src/main/java/com/kaifangqian/modules/system/controller/SysUserController.java. The...

5.3CVSS0.00262EPSS
SaveExploits0References4
Snyk
Snyk
•added 2025/10/07 4:38 a.m.•6 views

Malicious Package

Overview webpack-dev-serve-middleware is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/07 4:38 a.m.•5 views

Malicious Package

Overview pancakepool is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/07 4:38 a.m.•9 views

Malicious Package

Overview unitest2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/07 4:38 a.m.•9 views

Malicious Package

Overview mad-6.0.0.2.2.8. is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/10/07 4:26 a.m.•9 views

Malicious Package

Overview vishutransitivefn is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Rows per page
Query Builder