CVE-2022-39224

creationtimestamp| type| source ---|---|--- 2022-09-22 02:23:30+00:00| seen| https://t.me/cibsecurity/50247 2025-06-24 11:11:05+00:00| confirmed| https://gist.github.com/FrancoisCapon/a196def512f709769d99d9fba9f55cfc...

Malicious Package

Overview fleetrouting-app-backend is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

CVE-2022-37122

creationtimestamp| type| source ---|---|--- 2022-08-31 20:43:06+00:00| seen| https://t.me/cibsecurity/49131 2025-10-05 10:02:43+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-37122.yaml 2025-10-12 09:00:04+00:00| published-proof-of-concept...

Malicious Package

Overview dobix is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was install...

kunststofenrubber.nl Cross Site Scripting vulnerability OBB-2835448

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-2552

creationtimestamp| type| source ---|---|--- 2022-08-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/50993 2024-12-14 08:45:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2552.yaml...

CVE-2022-31181

creationtimestamp| type| source ---|---|--- 2022-07-26 06:00:27+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2777 2022-07-28 07:16:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2788 2022-08-02 00:17:27+00:00| seen| https://t.me/cibsecurity/47383 2025-10-10...

CVE-2021-40149

creationtimestamp| type| source ---|---|--- 2022-07-26 04:30:44+00:00| seen| https://t.me/cibsecurity/46408 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-40149.yaml...

CVE-2022-2168

creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:41+00:00| seen| https://t.me/cibsecurity/46384 2025-04-06 08:48:29+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2168.yaml...

CVE-2022-31161

creationtimestamp| type| source ---|---|--- 2022-07-16 00:20:39+00:00| seen| https://t.me/cibsecurity/46374 2025-05-20 07:32:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-31161.yaml 2025-05-23 21:02:22+00:00| seen|...

bkctrophies.co.uk Cross Site Scripting vulnerability OBB-2770722

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview esper-docs is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

CVE-2022-0250

creationtimestamp| type| source ---|---|--- 2022-07-04 16:12:29+00:00| seen| https://t.me/cibsecurity/45559 2024-12-02 11:15:10+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-0250.yaml...

super-roll.de Cross Site Scripting vulnerability OBB-2717640

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kalakendra.com Cross Site Scripting vulnerability OBB-2715200

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-25003

creationtimestamp| type| source ---|---|--- 2022-06-29 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6293 2022-12-08 09:11:43+00:00| published-proof-of-concept| https://t.me/poxek/2605 2022-12-08 11:09:59+00:00| published-proof-of-concept|...

CVE-2021-41460

creationtimestamp| type| source ---|---|--- 2022-06-28 16:36:09+00:00| seen| https://t.me/cibsecurity/45291 2023-08-22 10:38:38+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-41460.yaml...

Malicious Package

Overview vor-test-project-npm-please-ignore-1 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

Malicious Package

Overview klook-tetris-server is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was uncovered by o...

CVE-2022-2130

creationtimestamp| type| source ---|---|--- 2022-06-20 12:26:18+00:00| seen| https://t.me/cibsecurity/44811 2024-11-27 11:46:27+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2130.yaml...