MAL-2025-41422 Malicious code in cal-pretty-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b610f09a6268f2b584d18668b4311c4550b6cdbe798b386f161647b6b45299a8 The OpenSSF Package Analysis project identified 'cal-pretty-console' @ 10.13.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in myyntikone-cal-traintypes (npm)

The package myyntikone-cal-traintypes was found to contain malicious code...

Malicious code in vrfi-cal-registration (npm)

The package vrfi-cal-registration was found to contain malicious code...

Malicious code in myyntikone-cal-tickets (npm)

The package myyntikone-cal-tickets was found to contain malicious code...

MAL-2025-27035 Malicious code in myyntikone-cal-tickets (npm)

The package myyntikone-cal-tickets was found to contain malicious code...

MAL-2025-27036 Malicious code in myyntikone-cal-traintypes (npm)

The package myyntikone-cal-traintypes was found to contain malicious code...

MAL-2025-38641 Malicious code in vrfi-cal-registration (npm)

The package vrfi-cal-registration was found to contain malicious code...

CVE-2021-26475

EPrints 3.4.2 exposes a reflected XSS opportunity in the via a cgi/cal URI...

WordPress plugin Breeze Display 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

SUSE CVE-2022-49254

In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fix a NULL pointer dereference in calctxv4l2initformats In calctxv4l2initformats, devmkzalloc is assigned to ctx-activefmt and there is a dereference of it after that, which could lead to NULL pointer...

cal-inc.com Cross Site Scripting vulnerability OBB-3949542

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Tabletop exercises are headed to the next frontier: Space

I think we can all agree that tabletop exercises are a good thing. They allow organizations of all sizes to test their incident response plans without the potentially devastating effects of a real-world cyber attack or intrusion. As part of my role at Talos, Ive read hundreds of tabletop exercise...

cal-pharma.com Cross Site Scripting vulnerability OBB-3918996

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cs3.calstatela.edu Cross Site Scripting vulnerability OBB-3840218

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Anonymous user sessions cannot get a valid RDS User CAL license

With RDS User CALs deployment, anonymous user sessions cannot launch successfully...

PT-2023-24168 · Minical · Minical

Name of the Vulnerable Software and Affected Versions: miniCal version 1.0.0 Description: A critical issue affects the processing of the file /booking/show bookings/. The manipulation of the search query argument leads to SQL injection. The attack may be initiated remotely. The exploit has been...

cal-gas.co.uk Improper Access Control vulnerability OBB-3358506

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2011-1466

Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash via a large integer in the first argument to the calfromjd function...

cal-surety.com Cross Site Scripting vulnerability OBB-3187741

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cal-ibis.org Cross Site Scripting vulnerability OBB-3131821

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...