1607 matches found
CVE-2025-42907 Server-Side Request Forgery in SAP BI Platform
SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...
CVE-2025-42907 Server-Side Request Forgery in SAP BI Platform
SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...
PT-2025-39106
Name of the Vulnerable Software and Affected Versions SAP BI Platform affected versions not specified Description An attacker can modify the IP address within the LogonToken associated with OpenDoc. Accessing the modified link in a web browser may redirect a ping request to a different server. Th...
CVE-2025-10195
CVE-2025-10195 affects Seismic App version 2.4.2 on Android, specifically the com.seismic.doccenter AndroidManifest.xml. The vulnerability arises from improper export of an Android component, enabling a local attack. Exploit appears publicly disclosed; vendor has not responded. Several sources co...
Malicious code in numba-doc-zh (npm)
The package numba-doc-zh was found to contain malicious code...
MAL-2025-45378 Malicious code in numba-doc-zh (npm)
The package numba-doc-zh was found to contain malicious code...
Malicious code in pytorch-doc-zh (npm)
The package pytorch-doc-zh was found to contain malicious code...
Malicious code in pyqt4-doc-zh (npm)
The package pyqt4-doc-zh was found to contain malicious code...
MAL-2025-45661 Malicious code in pyqt4-doc-zh (npm)
The package pyqt4-doc-zh was found to contain malicious code...
Malicious code in doc-plugin-rush-stack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a12c396a6086d8e62fcd6527bd6c4056f50c8def8a668f50a021b0c73a3291be The OpenSSF Package Analysis project identified 'doc-plugin-rush-stack' @ 99.0.9 npm as malicious. It is considered malicious because: - The...
MAL-2025-41283 Malicious code in doc-plugin-rush-stack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a12c396a6086d8e62fcd6527bd6c4056f50c8def8a668f50a021b0c73a3291be The OpenSSF Package Analysis project identified 'doc-plugin-rush-stack' @ 99.0.9 npm as malicious. It is considered malicious because: - The...
MAL-2025-47796 Malicious code in python-amazon-doc-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 17e1f33275376bf6eef8f0ff4a1f42b8a45bada7b53462c827f397b7554bc2b0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in config-doc (npm)
The package config-doc was found to contain malicious code...
Malicious code in seaborn-doc-zh (npm)
The package seaborn-doc-zh was found to contain malicious code...
Malicious code in doc-smith (npm)
The package doc-smith was found to contain malicious code...
cli-form (>=0.0.0, <=0.1.4), kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via config-doc (0.1.0)
config-doc NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on config-doc and may be impacted: - cli-form =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17474...
MAL-2025-11181 Malicious code in @zalastax/nolb-doc4 (npm)
The package @zalastax/nolb-doc4 was found to contain malicious code...
MAL-2025-18559 Malicious code in doc-smith (npm)
The package doc-smith was found to contain malicious code...