744 matches found
Microsoft Azure Cosmos DB 跨站脚本漏洞
Microsoft Azure Cosmos DB is a distributed multi-model database from Microsoft USA. A spoofing vulnerability exists in Microsoft Azure Cosmos DB that stems from improper input neutralization and can be exploited by an attacker to cause a network spoofing attack...
KLA90827 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure Cosmos DB can...
PT-2025-52373
Name of the Vulnerable Software and Affected Versions Azure Cosmos DB affected versions not specified Description An issue exists in Azure Cosmos DB related to improper neutralization of input during web page generation, leading to a cross-site scripting condition. This allows an unauthorized...
EUVD-2025-179524
Malicious code in cosmos-concurrently-uninstall-jest npm...
EUVD-2025-179525
Malicious code in cosmos-centaurus-charon-tool npm...
EUVD-2025-179656
Malicious code in comet-xanthus-cosmos-protoplanetarydisk npm...
EUVD-2025-178018
Malicious code in loop-cosmos-perturbation-andromeda npm...
EUVD-2025-179523
Malicious code in cosmos-coronalmassejection-remark-arcturus npm...
Malicious code in duplex-version-polaris-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473d20a9e34bd0d8b61bff859c9548289744b91ff9d50156cf77a4aeff126ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179520
Malicious code in cosmos-public-warp-planckscale npm...
EUVD-2025-180502
Malicious code in adonis-cosmos-eslint-plugin-izar npm...
EUVD-2025-175617
Malicious code in webdriver-manager-cosmos-mongoose-got npm...
Malicious code in cosmos-framework-gacrux-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd2a9d5b7263324033c43fd921ffc4f87609c2d056fd9ab0813eb4da595dcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176872
Malicious code in quantum-node-config-quito-cosmos npm...
EUVD-2025-179784
Malicious code in chalk-mui-neptune-cosmos npm...
EUVD-2025-179517
Malicious code in cosmos-yonder-grunt-nashira npm...
Malicious code in miranda-cosmos-resonance-loopback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95e97f651188e953913cd0aa5f218e99332b565f20b2a3260e5b791bee3db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178046
Malicious code in local-cz-conventional-changelog-cosmos-quark npm...
Malicious code in hermes-venus-cosmos-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f0ead71ec8f697105cbfd97c82d6210be7471ec2fef6679e08c1f6e42863ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...