nightingale v9.0.0

Open-Source Alerting Expert English | 中文 🎯 What is Nightingale Nightingale is an open-source monitoring project that focuses on alerting. Similar to Grafana, Nightingale also connects with various existing data sources. However, while Grafana emphasizes visualization, Nightingale places greater...

EUVD-2025-44075

Malicious code in didi-store npm...

Malicious code in didi-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec40734e930981063202411bf5a56c99bc1c947a0e0f630353614505610bca37 The package didi-store was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-55024 Malicious code in didi-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec40734e930981063202411bf5a56c99bc1c947a0e0f630353614505610bca37 The package didi-store was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2023-54814

Malicious code in bioql PyPI...

EUVD-2024-33348

Malicious code in bioql PyPI...

EUVD-2024-32957

Malicious code in bioql PyPI...

EUVD-2024-33117

Malicious code in bioql PyPI...

Malicious code in @didi-pebble/pblint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb1531e6163d25b10b0a50538ba7b2462eea1da3199b5163aa90b8f5e4882e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @didi-pebble/pblint

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-10435

A vulnerability was found in didi Super-Jacoco 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cov/triggerEnvCov. The manipulation of the argument uuid leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2024-10173

A vulnerability has been found in didi DDMQ 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Console Module. The manipulation with the input /;login leads to improper authentication. The attack can be launched remotely. The exploit has be...

CVE-2024-10919

A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack can be launched remotely. The exploit h...

CVE-2024-10919

A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack can be launched remotely. The exploit h...

CVE-2024-10919 didi Super-Jacoco triggerUnitCover os command injection

A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack can be launched remotely. The exploit h...

CVE-2024-10919 didi Super-Jacoco triggerUnitCover os command injection

A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack can be launched remotely. The exploit h...

CVE-2024-10919

CVE-2024-10919 affects didi Super-Jacoco 1.0. The vulnerability lies in the /cov/triggerUnitCover function, where manipulating the uuid parameter leads to an OS command injection. The attack can be launched remotely, and the public exploit is available. Connected sources confirm the issue and des...

CVE-2024-10919

A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack can be launched remotely. The exploit h...

DiDi Super-Jacoco 安全漏洞

DiDi Super-Jacoco is a one-stop JAVA code full/diff coverage collection platform from China's Dripping DiDi company. A security vulnerability exists in DiDi Super-Jacoco version 1.0, which stems from an operating system command injection in the parameter uuid...

CVE-2024-10919: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack can be launched remotely. The exploit h...