Lucene search
+L

10505 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/04 8:51 a.m.12 views

Malicious code in safe-backend-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07c4d0b3565522f959a93610e46a8e5765c7405621afd4e3ef3856dc77cf4cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/03/04 8:51 a.m.6 views

MAL-2025-2125 Malicious code in safe-backend-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07c4d0b3565522f959a93610e46a8e5765c7405621afd4e3ef3856dc77cf4cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2015-8551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit...

6CVSS6AI score0.00451EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/03/04 12:0 a.m.9 views

CVE-2024-50706

Unauthenticated SQL injection vulnerability in Uniguest Tripleplay version 23.1+ allows remote attackers to execute arbitrary SQL queries on the backend database...

10AI score0.00498EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2015-8552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to...

4.4CVSS6.1AI score0.00446EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/03 1:35 p.m.7 views

Malicious code in paypal-expanded-integration-backend-node (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2025/02/28 4:25 p.m.6 views

MAL-2025-1631 Malicious code in tfjs-backend-webgl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394beab3692bd8a9cc0902f84d10854738b137e336a125a3be59345d8e13f284 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2025/02/28 4:25 p.m.7 views

MAL-2025-1630 Malicious code in tfjs-backend-cpu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab996031ea5c2f352b36f8fe674a3567caea43a481c8484f1612f5b80317b57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/28 4:25 p.m.5 views

Malicious code in tfjs-backend-webgl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394beab3692bd8a9cc0902f84d10854738b137e336a125a3be59345d8e13f284 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/28 4:25 p.m.5 views

Malicious code in tfjs-backend-cpu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab996031ea5c2f352b36f8fe674a3567caea43a481c8484f1612f5b80317b57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/28 4:25 p.m.8 views

Malicious code in paypal-checkout-integration-backend-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8978fb3635d1339256e1aa90eab3f76ba33bad36f9a2ffd70d1f6fc7d60ccca8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/27 10:21 p.m.16 views

CVE-2025-22211

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the country management area in backend...

3.4CVSS8.3AI score0.00352EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.10 views

GFast 安全漏洞

GFast is a GF Go Frame based backend management system by tiger1103. A security vulnerability exists in GFast v2 to v3.2, which originates from a SQL injection in the OrderBy parameter of /system/operLog/list...

9.8CVSS7.8AI score0.00523EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/02/26 12:0 a.m.11 views

PT-2025-8593 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists in the Linux kernel's xen/arm component, specifically in the RB-tree based P2M accounting. The issue arises from concurrent calls to set phys to machine multi b...

4.7AI score
SaveExploits0References1
OSV
OSV
added 2025/02/25 10:15 p.m.7 views

CVE-2025-22211

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the country management area in backend...

3.4CVSS6AI score0.00352EPSS
SaveExploits1References2
NVD
NVD
added 2025/02/25 10:15 p.m.19 views

CVE-2025-22211

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the country management area in backend...

3.4CVSS0.00352EPSS
SaveExploits1References2
OSV
OSV
added 2025/02/25 6:15 a.m.9 views

CVE-2025-22210

A SQL injection vulnerability in the Hikashop component versions 3.3.0-5.1.4 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the category management area in backend...

7.2CVSS6AI score0.00489EPSS
SaveExploits1References2
CVE
CVE
added 2025/02/25 5:16 a.m.81 views

CVE-2025-22210

The CVE-2025-22210 entry relates to a SQL injection in the Hikashop Joomla component (versions 3.3.0–5.1.4) that is exploitable by authenticated administrators via the category management area in the backend. Affected software: Hikashop component for Joomla. Root cause: improper handling of SQL q...

7.2CVSS8.4AI score0.00489EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/25 12:0 a.m.8 views

PT-2025-7811 · Hikashop · Hikashop

Name of the Vulnerable Software and Affected Versions: Hikashop component for Joomla versions 3.3.0 through 5.1.4 Description: A SQL injection vulnerability in the Hikashop component for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the category manageme...

7.2CVSS8.8AI score0.00489EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2025/02/21 12:0 a.m.6 views

GFast 安全漏洞

GFast is a GF Go Frame based backend management system by tiger1103 individual developer. A security vulnerability exists in GFast 3.2 and earlier versions, which stems from SQL injection in the SortName parameter...

4.2CVSS7.8AI score0.00177EPSS
SaveExploits0References3
Rows per page
Query Builder