Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in medusa-plugin-announcement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b07264455976108e9b10007ffccea47d12a9b8642114b28082c0d80130c851 The package medusa-plugin-announcement was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190849 Malicious code in medusa-plugin-announcement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b07264455976108e9b10007ffccea47d12a9b8642114b28082c0d80130c851 The package medusa-plugin-announcement was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198782

Malicious code in @kvytech/medusa-plugin-announcement npm...

PT-2025-44589

Netwrix Endpoint Protector formerly known as CoSoSys Endpoint Protector Details on CVE-2025-59796 will be released soon. The vendor has released an announcement and security patch; please update promptly: https://t.co/XNvjTaLOdD https://t.co/LVO6Y32UT1...

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

CVE-2025-12261 CodeAstro Gym Management System remove-announcement.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

CVE-2025-12261

CodeAstro Gym Management System 1.0 is affected by a SQL injection in /admin/actions/remove-announcement.php caused by manipulation of the ID parameter. The vulnerability can be exploited remotely and the exploit has been made public. Affected product/component: CodeAstro Gym Management System 1....

CVE-2025-12261 CodeAstro Gym Management System remove-announcement.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/actions/remove-announcement.php, which could lead to a SQL...

PT-2025-43922

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A flaw exists in CodeAstro Gym Management System version 1.0 that allows for SQL injection. This occurs through manipulation of the ID argument in the file...

CVE-2025-11645 Tomofun Furbo Mobile App Authentication Token sensitive information

A security vulnerability has been detected in Tomofun Furbo Mobile App up to 7.57.0a on Android. This affects an unknown part of the component Authentication Token Handler. The manipulation leads to insecure storage of sensitive information. It is possible to launch the attack on the physical...

Drupal API Key manager 安全漏洞

Drupal API Key manager is an API key management extension for the Drupal community. A security vulnerability exists in Drupal API Key manager. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

EUVD-2005-3022

Malware in sbrugna...

EUVD-2021-22204

Malware in sbrugna...

EUVD-2018-4284

Malware in sbrugna...

EUVD-2021-19386

Malware in sbrugna...

EUVD-2020-17807

Malware in sbrugna...

EUVD-2017-17837

Malware in sbrugna...

WordPress Wp cycle text announcement plugin <= 8.1 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Peter Thaleikis in WordPress Plugin Wp cycle text announcement versions = 8.1...