44 matches found
Malicious code in didi-store (npm)
Source: amazon-inspector ec40734e930981063202411bf5a56c99bc1c947a0e0f630353614505610bca37 The package didi-store was found to contain malicious code. Source: ossf-package-analysis b6865235b7969b9255820b0f2ec34bebf1d7570865f85290865b28d0de85bf75 The OpenSSF Package Analysis project identified...
nightingale v9.0.0
Open-Source Alerting Expert English | δΈζ π― What is Nightingale Nightingale is an open-source monitoring project that focuses on alerting. Similar to Grafana, Nightingale also connects with various existing data sources. However, while Grafana emphasizes visualization, Nightingale places greater...
EUVD-2025-44075
Malicious code in didi-store npm...
Malicious code in didi-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec40734e930981063202411bf5a56c99bc1c947a0e0f630353614505610bca37 The package didi-store was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-55024 Malicious code in didi-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec40734e930981063202411bf5a56c99bc1c947a0e0f630353614505610bca37 The package didi-store was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2024-33348
Malicious code in bioql PyPI...
EUVD-2024-33117
Malicious code in bioql PyPI...
EUVD-2024-32957
Malicious code in bioql PyPI...
EUVD-2023-54814
Malicious code in bioql PyPI...
Malware in @didi-pebble/pblint
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @didi-pebble/pblint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb1531e6163d25b10b0a50538ba7b2462eea1da3199b5163aa90b8f5e4882e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-10435
A vulnerability was found in didi Super-Jacoco 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cov/triggerEnvCov. The manipulation of the argument uuid leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2024-10173
A vulnerability has been found in didi DDMQ 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Console Module. The manipulation with the input /;login leads to improper authentication. The attack can be launched remotely. The exploit has be...
CVE-2024-10919
A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack can be launched remotely. The exploit h...
CVE-2024-10919
A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack can be launched remotely. The exploit h...
CVE-2024-10919 didi Super-Jacoco triggerUnitCover os command injection
A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack can be launched remotely. The exploit h...
CVE-2024-10919 didi Super-Jacoco triggerUnitCover os command injection
A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack can be launched remotely. The exploit h...
CVE-2024-10919
CVE-2024-10919 affects didi Super-Jacoco 1.0. The vulnerability lies in the /cov/triggerUnitCover function, where manipulating the uuid parameter leads to an OS command injection. The attack can be launched remotely, and the public exploit is available. Connected sources confirm the issue and des...
CVE-2024-10919
A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack can be launched remotely. The exploit h...
PT-2024-16640
Name of the Vulnerable Software and Affected Versions didi Super-Jacoco version 1.0 Description A critical issue has been found in the software, affecting an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the uuid argument leads to os command injection. This issue ca...