Lucene search
K

36 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/10 6:2 p.m.2 views

Malicious code in doubtful_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf41302790eaef211014bc8e311705198f3633d2a24893fd3cbd10d7f57130e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSV
OSV
added 2025/11/10 5:21 p.m.1 views

MAL-2025-56914 Malicious code in iwan-gorengan81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973b7e14b49e5222efd52ee5b3a40942140d8b5570181535b08c05a803b31977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/10 5:21 p.m.2 views

Malicious code in riana-semur37-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538956a489d4f24743e24993a20787b499f6e39774f55bdfb494efbfae06f8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/10 5:21 p.m.2 views

Malicious code in sure_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a467afd767b7ccd879603369a27a2418e2aa4ef28e5e4d940bb5426c6107a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/10 5:27 a.m.2 views

Malicious code in sinta-lapis9-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e56b5edf5040b15e8b2a5e4a7710e8e34a188467dac8330b8654d5c6475861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/10 4:5 a.m.2 views

Malicious code in eka-donat34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e25ae2aa8ae46ca0c034a57beb6a696464516cd86713c468da561dbc2ffedd The package eka-donat34-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

6.9AI score
Exploits0
Microsoft KB
Microsoft KB
added 2024/09/10 7:0 a.m.180 views

September 10, 2024—KB5043129 (Monthly Rollup)

September 10, 2024—KB5043129 Monthly Rollup End of support information As of January 10, 2023, Microsoft no longer provides security updates or technical support for Windows 7 Service Pack 1 SP1. We recommend that you upgrade to a supported version of Windows. For more information, see Update tha...

9.8CVSS7.2AI score0.28831EPSS
Exploits3
CNNVD
CNNVD
added 2023/09/20 12:0 a.m.2 views

IBM Robotic Process Automation 安全漏洞

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. can help you automate more business and IT processes at scale with the ease and speed of traditional RPA. An information disclosure vulnerability exists in IBM Robotic Process...

5.3CVSS5.8AI score0.00066EPSS
Exploits0References3
Gitee
Gitee
added 2022/02/20 5:49 p.m.3 views

nuclei-templates

This repository is a collection of templates for the nuclei engine, a tool used to find security vulnerabilities in applications. The templates are used to identify potential vulnerabilities and are contributed by both the project's team and the community. The repository contains various template...

8.1AI score
Exploits0
OSV
OSV
added 2021/12/08 11:15 a.m.3 views

CVE-2021-26110

An improper access control vulnerability CWE-284 in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and FortiProxy 2.0.1 and below, 1.2.9 and below may allow an authenticated low-privileged attacker to escalate their privileges to superadmin via a specific crafted...

7.8CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2021/12/08 12:0 a.m.2 views

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An access control error...

7.8CVSS5.7AI score0.00148EPSS
Exploits0References5
OSV
OSV
added 2019/06/17 2:15 p.m.2 views

CVE-2018-20468

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An attacker can embed Excel formulas inside an automation script that, when exported after execution, results in code execution...

8.8CVSS5.9AI score0.00789EPSS
Exploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/17 3:35 p.m.28 views

Security Bulletin: IBM Maximo Asset Management could allow a remote authenticated attacker to execute arbitrary commands on the system as administrator (CVE-2016-9984)

Summary IBM Maximo Asset Management could allow a remote authenticated attacker to execute arbitrary commands on the system as administrator. Vulnerability Details CVEID: CVE-2016-9984 DESCRIPTION: IBM Maximo Asset Management could allow a remote authenticated attacker to execute arbitrary comman...

8.8CVSS1AI score0.02587EPSS
Exploits0Affected Software14
Kitploit
Kitploit
added 2013/08/29 1:3 a.m.14 views

[Process Magic v2.0] Command-line Tool to Hide Windows Application or Launch New Process in Hidden Mode

Process Magic is the command-line tool to Hide any Windows application or launch new application in Hidden or Invisible mode. In addition to hiding any Windows process, it also allows you to Unhide any previously Hidden application. Note that it hides the application by hiding its main window. So...

7.1AI score
Exploits0
Kitploit
Kitploit
added 2013/06/11 4:3 a.m.16 views

[Process Magic] Tool to Hide any Windows application in Hidden or Invisible mode

Process Magic is the command-line tool to Hide any Windows application or launch new application in Hidden or Invisible mode. In addition to hiding any Windows process, it also allows you to Unhide any previously Hidden application. Note that it hides the application by hiding its main window. So...

7.1AI score
Exploits0
Kitploit
Kitploit
added 2013/02/28 5:21 p.m.16 views

[RemoteDLLInjector] Command-line Tool to Inject DLL into Remote Process

Remote DLL Injector is the free command-line tool to Inject DLL into remote process. Currently it supports DLL injection using the CreateRemoteThread technique. If you are looking for advanced and more user friendly GUI version then check out our popular RemoteDll tool. Being a command-line tool...

7.8AI score
Exploits0
Rows per page
Query Builder