CVE-2021-37304

creationtimestamp| type| source ---|---|--- 2023-02-03 20:20:57+00:00| seen| https://t.me/cibsecurity/57478 2023-05-18 01:00:13+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-37304.yaml 2025-03-26 16:25:31+00:00| published-proof-of-concept...

CVE-2023-22952

creationtimestamp| type| source ---|---|--- 2023-02-03 06:39:42+00:00| exploited| https://t.me/thehackernews/3014 2023-03-09 17:01:25+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sugarcrmwebshellcve202322952.rb 2023-03-11 12:57:01+00:00|...

Malicious Package

Overview charset-normalizer is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

martman.in Cross Site Scripting vulnerability OBB-3068619

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amavi.co.il Cross Site Scripting vulnerability OBB-3050746

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

centralhotelapart.de Cross Site Scripting vulnerability OBB-3033567

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview t0jcl is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was install...

CVE-2022-40443

creationtimestamp| type| source ---|---|--- 2022-09-22 18:12:16+00:00| seen| https://t.me/cibsecurity/50264 2025-01-16 09:28:49+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-40443.yaml 2025-01-20 21:02:00+00:00| seen|...

CVE-2022-39224

creationtimestamp| type| source ---|---|--- 2022-09-22 02:23:30+00:00| seen| https://t.me/cibsecurity/50247 2025-06-24 11:11:05+00:00| confirmed| https://gist.github.com/FrancoisCapon/a196def512f709769d99d9fba9f55cfc...

Malicious Package

Overview fleetrouting-app-backend is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

CVE-2022-37122

creationtimestamp| type| source ---|---|--- 2022-08-31 20:43:06+00:00| seen| https://t.me/cibsecurity/49131 2025-10-05 10:02:43+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-37122.yaml 2025-10-12 09:00:04+00:00| published-proof-of-concept...

Malicious Package

Overview dobix is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was install...

kunststofenrubber.nl Cross Site Scripting vulnerability OBB-2835448

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-2552

creationtimestamp| type| source ---|---|--- 2022-08-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/50993 2024-12-14 08:45:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2552.yaml 2026-09-01 20:01:32+00:00| seen|...

CVE-2022-31181

creationtimestamp| type| source ---|---|--- 2022-07-26 06:00:27+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2777 2022-07-28 07:16:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2788 2022-08-02 00:17:27+00:00| seen| https://t.me/cibsecurity/47383 2025-10-10...

CVE-2021-40149

creationtimestamp| type| source ---|---|--- 2022-07-26 04:30:44+00:00| seen| https://t.me/cibsecurity/46408 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-40149.yaml 2026-09-01 20:01:37+00:00| seen|...

CVE-2022-2168

creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:41+00:00| seen| https://t.me/cibsecurity/46384 2025-04-06 08:48:29+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2168.yaml...

CVE-2022-31161

creationtimestamp| type| source ---|---|--- 2022-07-16 00:20:39+00:00| seen| https://t.me/cibsecurity/46374 2025-05-20 07:32:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-31161.yaml 2025-05-23 21:02:22+00:00| seen|...

bkctrophies.co.uk Cross Site Scripting vulnerability OBB-2770722

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview esper-docs is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...