EUVD-2025-49228

Malicious code in tartbonoboz3n npm...

EUVD-2025-49339

Malicious code in specifiedbonoboz3n npm...

EUVD-2025-49136

Malicious code in unhappybonoboz3n npm...

MAL-2025-61330 Malicious code in specified_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4df4365620f9e0d959266e313d536e78c314f8febbc908fb98dd3a34aaa0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-47799

Malicious code in extrabonoboz3n npm...

EUVD-2025-47739

Malicious code in faithfulbonoboz3n npm...

EUVD-2025-45191

Malicious code in strangebonoboz3n npm...

EUVD-2025-46340

Malicious code in mixedbonoboz3n npm...

EUVD-2025-47601

Malicious code in foolishbonoboz3n npm...

EUVD-2019-2918

Malware in sbrugna...

CVE-2002-1814

Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments...

Malicious code in unwilling-emerald-bonobo (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2019-11217

The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in the context of the web server via a crafted http request...

Design/Logic Flaw

The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in the context of the web server via a crafted http request...

CVE-2019-11217

The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in the context of the web server via a crafted http request...

Input validation

Improper handling of extra parameters in the AccountController User Profile edit in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions...

CVE-2019-11218

Improper handling of extra parameters in the AccountController User Profile edit in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions...

CVE-2019-11218

Improper handling of extra parameters in the AccountController User Profile edit in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions...

CVE-2019-11218

CVE-2019-11218 affects Bonobo Git Server prior to 6.5.0, where improper handling of extra parameters in AccountController (User Profile edit) allows authenticated users to escalate privileges to application administrator. The issue is triggered by additional form parameters and is documented acro...

CVE-2019-11217

The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in the context of the web server via a crafted http request...