EUVD-2025-204935

Malicious code in bootstrap-setflexcolor npm...

Malicious code in bootstrap-setflexcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90557c8cf061fb243537b42df1c27af4fc410d5a3bbeb6df2346720058fa9d4f The package bootstrap-setflexcolor was found to contain malicious code...

MAL-2025-192718 Malicious code in bootstrap-setflexcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90557c8cf061fb243537b42df1c27af4fc410d5a3bbeb6df2346720058fa9d4f The package bootstrap-setflexcolor was found to contain malicious code...

EUVD-2025-204936

Malicious code in bootstrap-setcolors npm...

MAL-2025-192717 Malicious code in bootstrap-setcolors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49438d0a37b288cf5dcbc9c27b5bc18510beec255d1d359a1f5a25361d4b121e The package bootstrap-setcolors was found to contain malicious code...

Malicious code in bootstrap-setcolors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49438d0a37b288cf5dcbc9c27b5bc18510beec255d1d359a1f5a25361d4b121e The package bootstrap-setcolors was found to contain malicious code...

EUVD-2025-204937

Malicious code in bootstrap-setcolor npm...

Malicious code in bootstrap-setcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e711bb0bea7ae170d6be10137758bbb8e7d4fd0d987de9183d58c6ee224f41 The package bootstrap-setcolor was found to contain malicious code...

MAL-2025-192716 Malicious code in bootstrap-setcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e711bb0bea7ae170d6be10137758bbb8e7d4fd0d987de9183d58c6ee224f41 The package bootstrap-setcolor was found to contain malicious code...

FastAdmin SQL注入漏洞

FastAdmin is a set of web backend development framework based on ThinkPHP and Bootstrap by Karson's personal developer. FastAdmin 1.7.0.20250506 and earlier versions exist SQL injection vulnerability, the vulnerability stems from the application/common/controller/Backend.php file...

PYSEC-2025-103

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous...

PYSEC-2025-103

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous...

CVE-2025-63387

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous...

Medium: aws-cfn-bootstrap

Issue Overview: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc...

XSS in Bootstrap button component

...

Malicious Package

Overview bootstrap-setcolors is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this...

Malicious Package

Overview bootstrap-setflexcolor is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this...

Legacy Python Bootstrap Scripts Create Domain-Takeover Risk in Multiple PyPI Packages

Cybersecurity researchers have discovered vulnerable code in legacy Python packages that could potentially pave the way for a supply chain compromise on the Python Package Index PyPI via a domain takeover attack. Software supply chain security company ReversingLabs said it found the "vulnerabilit...

CVE-2025-11764

The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the notification shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated...

EUVD-2025-198419

The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the notification shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated...