Lucene search
+L

1582 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/10/03 1:24 a.m.•7 views

Malicious code in maris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51ada2e20ec86e5904271b914c6c51177884af2166992cf6534769a19a29fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/09/19 4:52 a.m.•7 views

Malicious code in jake-horizon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b68dd08145ebfefd1660159fac302e02d16e89fe9c227d0bb307daa8c5ed05a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/09/18 1:07 a.m.•8 views

Malicious code in symbl_ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a6d892c350f9034ac4cd7c1670b6b7a31f864e0ef2beeccfd53bb309336396 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/09/18 12:40 a.m.•19 views

MAL-2023-8150 Malicious code in telia-common-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfebd0cdbe7eb17494bd4125767a79da7343f06e4fbe26c09d95f7b94e123f8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/04 12:00 a.m.•7 views

CVE-2023-4749: External Control of File Name or Path

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS6.5AI score0.00988EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/01 10:15 a.m.•45 views

CVE-2023-4704

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

8.8CVSS6.1AI score0.00891EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/01 10:15 a.m.•32 views

Xxe

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

6.5CVSS5.1AI score0.00891EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2023/09/01 9:55 a.m.•5 views

CVE-2023-4704

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

8.8CVSS0.00891EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/09/01 9:55 a.m.•17 views

CVE-2023-4704 External Control of System or Configuration Setting in instantsoft/icms2

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

8.8CVSS6.8AI score0.00891EPSS
SaveExploits1References2
CVE
CVE
•added 2023/09/01 9:55 a.m.•59 views

CVE-2023-4704

CVE-2023-4704 affects instantsoft/icms2 prior to 2.16.1-git, where an External Control of System or Configuration Setting vulnerability exists in the GitHub-hosted project. The Red Hat/NVD entries confirm the issue as an external control of configuration settings, enabling an attacker with networ...

8.8CVSS6.7AI score0.00891EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/09/01 9:55 a.m.•53 views

CVE-2023-4704 External Control of System or Configuration Setting in instantsoft/icms2

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

8.8CVSS5.4AI score0.00891EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/09/01 12:00 a.m.•20 views

icms security breach

iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A security vulnerability exists in icms version 2.16.1-git, which is caused by an External Control of System or Configuration Setting vulnerability...

8.8CVSS6.8AI score0.00891EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/01 12:00 a.m.•6 views

CVE-2023-4704: External Control of System or Configuration Setting

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

8.8CVSS6.7AI score0.00891EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/09/01 12:00 a.m.•20 views

PT-2023-30294 · Instantsoft · Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1-git. Description: The issue allows for external control of system or configuration settings. Recommendations: For versions prior to 2.16.1-git, update to version 2.16.1-git or later to resolve the...

8.8CVSS6.7AI score0.00891EPSS
SaveExploits1References6
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/31 1:51 a.m.•12 views

Malicious code in mmolecule-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd75dfd6fa092015612a7f926c3e00d1c329aae61bb248d16f548202fd68801 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/31 1:51 a.m.•7 views

Malicious code in mmolecule-elasticsearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4066df1016d7aee5ec19b765089b99b9b47513327cbbe8afe20985bb3fbda37b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/25 1:34 a.m.•7 views

Malicious code in poctesthackerone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e10f050ce87c2eddfab008bc14c595470ee57d39981deba3bacf86bbd6624ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/21 2:31 a.m.•6 views

Malicious code in ent-cas-common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5431a932c9fdc7650aac9d95765b694034048878e15c4d0a97942d49eac96f05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/15 3:52 a.m.•9 views

Malicious code in nayan-remake-h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19053998e2ab25df5c7f4d43ec65d58f78399fc9bee16238f06d16e618898019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/11 11:06 a.m.•7 views

Malicious code in hsqwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6af02b8a41a1ba2a2897c59a9bfe66780bc83afc705127d53c22c2d463c74bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder