2399 matches found
Cross-site Scripting (XSS)
Overview contao/core-bundle is an Open Source PHP Content Management System for people who want a professional website that is easy to maintain. Affected versions of this package are vulnerable to Cross-site Scripting XSS via template output. An attacker can execute arbitrary scripts in the brows...
Insufficient Type Distinction
Overview contao/core-bundle is an Open Source PHP Content Management System for people who want a professional website that is easy to maintain. Affected versions of this package are vulnerable to Insufficient Type Distinction in the Template::once method. Backend users with sufficient privileges...
CVE-2025-64308 Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials
The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal...
CVE-2025-64308
The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal...
CVE-2025-64308 Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials
The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal...
CLSA-2025-1763137741 python3.11-cryptography: Fix of CVE-2023-49083
CVE-2023-49083: fix crash when loading PKCS7 bundle with no certificates - Fix RUSTFLAGS macro expansion in build process...
PT-2025-47030
Name of the Vulnerable Software and Affected Versions Brightpick Mission Control affected versions not specified Description The Brightpick Mission Control web application contains hardcoded credentials within its client-side JavaScript bundle. These credentials are directly embedded in the code,...
EUVD-2025-179943
Malicious code in bundle-alert-runtime-private-bundle npm...
EUVD-2025-179762
Malicious code in char-bundle-route-refactor-async npm...
EUVD-2025-179848
Malicious code in cat-void-bash-cache-bundle npm...
EUVD-2025-176941
Malicious code in public-bundle-class-iota-thread npm...
EUVD-2025-178986
Malicious code in execute-java-short-cluster-bundle npm...
EUVD-2025-179592
Malicious code in container-bundle-wind-private-resolve npm...
EUVD-2025-177466
Malicious code in omicron-bundle-file-final-warn npm...
EUVD-2025-180487
Malicious code in air-epsilon-zeta-key-bundle npm...
Malicious code in air-epsilon-zeta-key-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3315bade14bc91e0c028f375cddafcc7a08630f221281feff53d52abe8355d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177043
Malicious code in process-daemon-pipe-try-bundle npm...
EUVD-2025-179140
Malicious code in encrypt-bundle-test-deploy-scale npm...