61 matches found
MAL-2026-15591 Malicious code in cre-setup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc14c964a76dde24165930e971dac9a2a9f36ecae68d596c7bf920cac8e1c29 bin/cli.js collects the current user whoami/os.userInfo, os.hostname, and os.platform and POSTs them, along with URL query parameters carrying the sa...
Malicious code in cre-setup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc14c964a76dde24165930e971dac9a2a9f36ecae68d596c7bf920cac8e1c29 bin/cli.js collects the current user whoami/os.userInfo, os.hostname, and os.platform and POSTs them, along with URL query parameters carrying the sa...
EUVD-2009-1401
Malware in sbrugna...
EUVD-2006-0485
Malware in sbrugna...
EUVD-2009-5031
Malware in sbrugna...
EUVD-2008-2552
Malware in sbrugna...
EUVD-2009-5032
Malware in sbrugna...
EUVD-2008-2553
Malware in sbrugna...
CVE-2009-5077
CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHPSELF variable, which is not properly handled by 1 includes/applicationtop.php and 2 admin/includes/applicationtop.php...
CVE-2009-5076
CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with 1 login.php or 2 passwordforgotten.php appended as the PATHINFO, which bypasses a check that uses PHPSELF, which is not properl...
pacificpartnerscre.com Cross Site Scripting vulnerability OBB-3928952
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cre-art.com Improper Access Control vulnerability OBB-3796411
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cre-summit.com Cross Site Scripting vulnerability OBB-3285998
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cre-navi.com Improper Access Control vulnerability OBB-2399224
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cre-hikaku.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1174390 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
cre-hikaku.com XSS vulnerability
Open Bug Bounty ID: OBB-442284 Description| Value ---|--- Affected Website:| cre-hikaku.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
CRE Loaded Multiple Security Bypass Vulnerabilities
CRE Loaded is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-5077
CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHPSELF variable, which is not properly handled by 1 includes/applicationtop.php and 2 admin/includes/applicationtop.php...
Authentication flaw
CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHPSELF variable, which is not properly handled by 1 includes/applicationtop.php and 2 admin/includes/applicationtop.php...
CVE-2009-5077
CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHPSELF variable, which is not properly handled by 1 includes/applicationtop.php and 2 admin/includes/applicationtop.php...