Lucene search
+L

175 matches found

vulnersOsv
vulnersOsv
•added 2026/02/25 6:17 a.m.•6 views

org.webjars.npm:github-com-datatables-datatablessrc (2.0.5), org.webjars.npm:vite (>=2.9.0, <=6.3.5) +1 more potentially affected by CVE-2026-27606 via org.webjars.npm:rollup (>=2.79.2, <=4.45.1)

org.webjars.npm:rollup MAVEN version =2.79.2, =2.9.0, =6.3.5 - org.webjars.npm:vitepress 1.0.0-draft.8 Source cves: CVE-2026-27606 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15340921...

9.8CVSS6.5AI score0.01545EPSS
SaveExploits1
Snyk
Snyk
•added 2026/01/06 3:37 a.m.•14 views

Malicious Package

Overview datatables-editor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/02 10:06 p.m.•22 views

Malicious code in datatables-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac14c14a0e1472b84944a2153607fa90a3d074098be58d2f6ffe586a5bf80846 The package datatables-editor was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2026/01/02 10:06 p.m.•20 views

MAL-2026-12 Malicious code in datatables-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac14c14a0e1472b84944a2153607fa90a3d074098be58d2f6ffe586a5bf80846 The package datatables-editor was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/01/02 10:06 p.m.•15 views

EUVD-2026-0742

Malicious code in datatables-editor npm...

6.6AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2025/12/04 8:04 a.m.•469 views

Exploit for Prototype Pollution in Datatables Datatables.Net

CVE-2020-28458 Affected versions of this package are vulnerabl...

7.5CVSS7AI score0.03715EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2025/12/03 7:05 p.m.•27 views

CVE-2025-66460

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

6.1CVSS6.7AI score0.00188EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/02 7:15 p.m.•27 views

CVE-2025-66460

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

6.1CVSS0.00188EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/02 6:34 p.m.•26 views

CVE-2025-66460 Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

5.3CVSS0.00188EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/02 6:34 p.m.•39 views

CVE-2025-66460

CVE-2025-66460 Lookyloo is a vulnerability in the Lookyloo web interface (pre-1.35.3) where improperly escaped values were passed to datatables cells rendered via the orthogonal-data feature. This can enable cross-site scripting (XSS) by injecting unsafe content into the UI, and is exploitable fr...

6.1CVSS5.9AI score0.00188EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/12/02 6:34 p.m.•13 views

EUVD-2025-200310

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

5.3CVSS6.2AI score0.00188EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/02 6:34 p.m.•15 views

CVE-2025-66460 Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

5.3CVSS6.6AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/12/02 6:34 p.m.•7 views

CVE-2025-66460 Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

5.3CVSS5.9AI score0.00188EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/02 12:00 a.m.•16 views

PT-2025-48753

Name of the Vulnerable Software and Affected Versions Lookyloo versions prior to 1.35.3 Description Lookyloo is a web interface used to capture and display a tree of domains that interact with each other. Versions of Lookyloo prior to 1.35.3 improperly escape values passed to cells rendered in...

6.1CVSS5.9AI score0.00188EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/12/02 12:00 a.m.•15 views

Lookyloo 跨站脚本漏洞

Lookyloo is a website capture tool from Lookyloo open source. A cross-site scripting vulnerability exists in Lookyloo versions prior to 1.35.3, which stems from improperly escaping orthogonal data in datatables and could lead to a cross-site scripting attack...

6.1CVSS6AI score0.00188EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/02 12:00 a.m.•1 views

CVE-2025-66460: Improper Neutralization of Input During Web Page Generation

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo passed improperly escaped values to cells rendered in datatables using the orthogonal-data feature. It is definitely exploitable from the popu...

6.1CVSS5.8AI score0.00188EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2021-23307

Malware in sbrugna...

6.1CVSS7.1AI score0.00792EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•39 views

EUVD-2020-0590

Malware in sbrugna...

4.3CVSS7.8AI score0.02679EPSS
SaveExploits2References14
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-33284

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00389EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-31365

Malicious code in bioql PyPI...

6.9CVSS5.6AI score0.00847EPSS
SaveExploits1References8
Rows per page
Query Builder