60 matches found
Improperly Controlled Modification of Dynamically-Determined Object Attributes
Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes in the account registration endpoint. An attacker can manipulate server-managed fields and associate new accounts with existing...
CVE-2025-9315
An unauthenticated device registration vulnerability, caused by Improperly Controlled Modification of Dynamically-Determined Object Attributes, has been identified in the MXsecurity Series. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted JSON paylo...
EUVD-2025-117448
Malicious code in determined-aqua-mackerel npm...
EUVD-2025-100073
Malicious code in determinedstingrayz3n npm...
MAL-2025-125704 Malicious code in determined_stingray_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc042bd102d30bb470fff0f0c726a5efbf702a0eed4accf84448adeb21959e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-106746
Malicious code in determinedkingfisherz3n npm...
EUVD-2025-92599
Malicious code in determinedhornetz3n npm...
EUVD-2025-92600
Malicious code in determinedhamsterz3n npm...
MAL-2025-113285 Malicious code in determined_hornet_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52e7201f065eaaa9d1d65bc69e9ee0a0abb44414ed6de797d85b480d33e6a2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in determined_cicada_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e15f23fde9334fc6f72209f6fedb45b034724ecf5e45429c233e2b96ad8625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-92601
Malicious code in determinedfishz3n npm...
EUVD-2025-92602
Malicious code in determinedcicadaz3n npm...
EUVD-2025-74749
Malicious code in determinedearwigtomato-65 npm...
EUVD-2025-77111
Malicious code in determinedwildcat-smiletea npm...
EUVD-2025-79438
Malicious code in determinedbaboonz3n npm...
EUVD-2025-82228
Malicious code in determinedtermite0xrequest npm...
EUVD-2025-70927
Malicious code in determinedbatz3n npm...
Malicious code in determined_landfowl_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2f24377f2118c1503aa7543fff2749457b3ae8e66abd96ab90c1067408e73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...