50377 matches found
CVE-2025-64482 Tuleap missing CSRF protections in the File Release System
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Edition prior to version 16.13.99.1762267347 and Tuleap Enterprise Edition prior to versions 17.01-, 16.13-6, and 16.12-9 don't have cross-site request forgery protections in the file...
EUVD-2025-119996
The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing nonce validation on the setsubscriptionlevel function. This makes it possible for unauthenticated attackers to modify the subscription settings of...
EUVD-2025-114822
Malicious code in csrf-izar-resolvers-nightmare npm...
EUVD-2025-114820
Malicious code in csrf-meissa-nodemon-neptune npm...
EUVD-2025-114817
Malicious code in csrf-oauth-zenobia-build npm...
EUVD-2025-114830
Malicious code in csrf-betelgeuse-cygnus-meissa npm...
EUVD-2025-114164
Malicious code in elektra-fornax-csrf-csv npm...
EUVD-2025-120803
Malicious code in venus-toml-google-csrf npm...
Malicious code in csrf-commitlint-config-angular-axios-lacerta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6402077653de7905967491c9e1aa4a9a1662661767e24f36434c2d419174f1b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116405
Malicious code in aurora-chai-csrf-mocha npm...
Malicious code in venus-toml-google-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19275523c1ac90a3c78c796a3d6a693d61c37f1c6e132085aab050319a35dde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114816
Malicious code in csrf-postcss-dependencies-upgrade npm...
EUVD-2025-111710
Malicious code in link-csrf-cressida-achernar npm...
EUVD-2025-113185
Malicious code in global-csrf-xml-package npm...
EUVD-2025-113090
Malicious code in gravity-csrf-shelljs-celeste npm...
EUVD-2025-122721
Malicious code in relay-jsonp-jsonp-csrf npm...
EUVD-2025-114825
Malicious code in csrf-gulp-standard-commitlint npm...
EUVD-2025-114821
Malicious code in csrf-levels-terser-zephyr npm...
Malicious code in equinox-nodejs-csrf-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0975315d4e177db7a394dfd05890d08f20a080994d0091cfe03b455a5044775a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...