1228 matches found
CVE-2026-82795
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
EUVD-2026-77251
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-82794
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-82794
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
EUVD-2026-77250
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-82794
SolarView Compact (by Contec ) contains an OS command injection vulnerability in its Schedule Settings feature. An attacker with authenticated access can execute arbitrary OS commands on the host system. The CVSS v3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indic...
CVE-2026-82794: Improper Neutralization of Special Elements used in an OS Command
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-82795: Improper Neutralization of Input During Web Page Generation
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
PT-2026-91099
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
PT-2026-91098
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
PT-2026-91100
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-82796: Improper Neutralization of Input During Web Page Generation
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
Malicious code in compact-tan-fowl (npm)
Source: amazon-inspector c1eaa4a5769b86112d4907fc6d4b8ea0029f28e2fffede09a6107409ac61dda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in compact-maroon-rook (npm)
Source: amazon-inspector 052f5d927b280655b9d75714a98a40f18d53f32edd7719807ece9baba53ee3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in compact-tan-goldfish (npm)
Source: amazon-inspector bbb1318ab14f4cc4798fc18728a5a460623690b36a34a54f02571af3c938f06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in compact-maroon-guppy (npm)
Source: amazon-inspector 909a58b99ce334b90d44a602b9d9f08389a8b8b22443e97914e8ba2ef29a4956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in compact-green-shrimp (npm)
Source: amazon-inspector 6f9286c69cf114a3585fd24fefadd4408fdcae89285d495751dff1e18936bc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in compact-blue-sturgeon (npm)
Source: amazon-inspector d5f87e1eac2ed4f3288ab6975861c89eab1c22abc554ecba38edf19e0874ddaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in compact-gold-mongoose (npm)
Source: amazon-inspector cd089cb204e640c0a045dbc093fed6b80b99038102a240a1b691c1be42922408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in compact-amaranth-pheasant (npm)
Source: amazon-inspector 9f8c2b6bacdacc755e9a065599849aefed38c41151f62be50fea90a53f4a845c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...