1607 matches found
Malicious code in hapi-doc-test (npm)
The package hapi-doc-test was found to contain malicious code...
Malicious code in scrapy-doc-zh (npm)
The package scrapy-doc-zh was found to contain malicious code...
Malicious code in grapesjs-from-doc (npm)
The package grapesjs-from-doc was found to contain malicious code...
MAL-2025-11182 Malicious code in @zalastax/nolb-doc5 (npm)
The package @zalastax/nolb-doc5 was found to contain malicious code...
MAL-2025-17474 Malicious code in config-doc (npm)
The package config-doc was found to contain malicious code...
MAL-2025-22177 Malicious code in hapi-doc-test (npm)
The package hapi-doc-test was found to contain malicious code...
Malicious code in ignore-doc (npm)
The package ignore-doc was found to contain malicious code...
brick-node (>=0.0.0, <=0.0.17), tinkr-cli (>=0.0.1, <=0.0.9) potentially affected by unknown CVE via ignore-doc (>=0.0.0, <=0.0.1)
ignore-doc NPM version =0.0.0, =0.0.0, =0.0.1, =0.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23012...
MAL-2025-11180 Malicious code in @zalastax/nolb-doc2 (npm)
The package @zalastax/nolb-doc2 was found to contain malicious code...
MAL-2025-23012 Malicious code in ignore-doc (npm)
The package ignore-doc was found to contain malicious code...
The vulnerability of the Tab-Doc API interface of the Tableau Server analytical platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Tab-Doc API interface of the Tableau Server analytical platform relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information...
PT-2025-32615 · Sap · Sap Netweaver Application Server Abap
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP BIC Document affected versions not specified Description: SAP NetWeaver Application Server ABAP BIC Document is susceptible to a crafted request that, when submitted to a BIC Document application, can cau...
Malicious code in badger-doc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 102e103c2148dd46b3b7b80cbf9641deea29213407e46ee74af433da247bd9ef The OpenSSF Package Analysis project identified 'badger-doc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-6810 Malicious code in badger-doc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 102e103c2148dd46b3b7b80cbf9641deea29213407e46ee74af433da247bd9ef The OpenSSF Package Analysis project identified 'badger-doc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection via the listCount function in the DocStoreDAO interface when the entityType parameter is used to construct a SQL query. An attacker can extract sensitive information from the database by injecting crafted input into the...
The vulnerability in the WeGIA web manager’s script /html/funcionario/dependente_editarDoc.php allows a perpetrator to disclose confidential information, increase their privileges, or execute arbitrary code.
The vulnerability of the /html/funcionario/dependenteeditarDoc.php web manager of WeGIA is related to the failure to protect the SQL query structure when processing the parameter idatendidofamiliares. Exploiting this vulnerability can allow an attacker to disclose confidential information, enhanc...
CVE-2025-52446: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux tab-doc api modules allows Interface Manipulation data access to the production database cluster.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...
WeGIA SQL Injection Vulnerability (CNVD-2025-17263)
WeGIA is a web manager for welfare organizations. WeGIA suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /html/funcionario/dependenteeditarDoc.php endpoint idatendidofamiliares parameter. An attacker could exploit...
WeGIA SQL注入漏洞
WeGIA is a web manager for welfare organizations. WeGIA suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /html/funcionario/dependenteeditarDoc.php endpoint idatendidofamiliares parameter. An attacker could exploit...