Lucene search
+L

1239 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/10 1:24 p.m.3 views

Malicious code in dow-load-twisted-palace-the-royals-3-by-erin-watt-on-kindle-full-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0992916e30ffe316f71ab67ab891183b2e852e6e9a04300baf44278b106f7b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/09 8:1 a.m.8 views

Malicious code in mapi-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c898d0a405d3dbdd1d8f7534d31152e30eb107a587e3b71d6ebb46116d22746 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Prion
Prion
added 2023/05/05 8:15 p.m.16 views

Xxe

External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...

5.8CVSS7AI score0.29134EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/05 12:0 a.m.7 views

CVE-2023-2554 External Control of File Name or Path in unilogies/bumsys

External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...

7.2CVSS7.1AI score0.29134EPSS
SaveExploits1References2
CVE
CVE
added 2023/05/05 12:0 a.m.42 views

CVE-2023-2554

CVE-2023-2554 affects unilogies/bumsys prior to 2.2.0. The issue is External Control of File Name or Path, enabling path traversal via user-supplied input used to build file paths in easyUpload, potentially allowing arbitrary file write. Public sources (NVD/Red Hat/Rust) rate severity as HIGH (CV...

7.2CVSS7AI score0.29134EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/05 12:0 a.m.7 views

PT-2023-20148 · Bumsys · Bumsys

Name of the Vulnerable Software and Affected Versions: bumsys versions prior to 2.2.0 Description: The issue concerns external control of file name or path in the GitHub repository unilogies/bumsys. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issu...

7.2CVSS7AI score0.29134EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2023/05/05 12:0 a.m.40 views

CVE-2023-2554 External Control of File Name or Path in unilogies/bumsys

External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...

7.2CVSS7.2AI score0.29134EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2023/05/02 9:31 p.m.35 views

Moodle External Control of File Name or Path vulnerability

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system...

6.5CVSS6AI score0.06583EPSS
SaveExploits3References12Affected Software1
OSV
OSV
added 2023/05/02 9:31 p.m.48 views

GHSA-22GJ-8QJ2-FJ46 Moodle External Control of File Name or Path vulnerability

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system...

5.3CVSS5.8AI score0.06583EPSS
SaveExploits3References12
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/04/13 1:46 a.m.5 views

Malicious code in zach-remade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e27245be58fc94ee9cb1f874ee0312902cdac4fd9d444c865442922683fe9aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/03/31 2:16 a.m.3 views

Malicious code in sa-club-documentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ec22686cd96cc265b760943a47162bbd00a00c3ca60478a5388cd11b84fcbff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/03/15 2:0 a.m.3 views

Malicious code in clientcore-base-serviceclients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fad1ea7ce0422c034f0a94e34659383bef565546e8580fbabe70b9530a317d83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References2
NVD
NVD
added 2023/03/01 2:15 a.m.25 views

CVE-2023-1105

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...

8.1CVSS7.8AI score0.00711EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/03/01 12:0 a.m.29 views

CVE-2023-1105 External Control of File Name or Path in flatpressblog/flatpress

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...

7.5CVSS8.4AI score0.00711EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2023/02/27 6:32 p.m.27 views

TeamPass External Control of File Name or Path vulnerability

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...

7.1CVSS6.7AI score0.00823EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/02/27 6:32 p.m.20 views

GHSA-X36G-4629-XP9V TeamPass External Control of File Name or Path vulnerability

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...

7.1CVSS6.8AI score0.00823EPSS
SaveExploits1References4
NVD
NVD
added 2023/02/27 4:15 p.m.34 views

CVE-2023-1070

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...

7.1CVSS6.9AI score0.00823EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/02/27 12:0 a.m.32 views

CVE-2023-1070 External Control of File Name or Path in nilsteampassnet/teampass

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...

7.1CVSS7.1AI score0.00823EPSS
SaveExploits1References2
OSV
OSV
added 2023/02/27 12:0 a.m.18 views

CVE-2023-1070 External Control of File Name or Path in nilsteampassnet/teampass

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...

7.1CVSS7AI score0.00823EPSS
SaveExploits1References4
GithubExploit
GithubExploit
added 2023/02/26 6:10 p.m.279 views

Exploit for External Control of File Name or Path in Fortinet Fortinac

FortiNAC CVE-2022-39952 PoC for CVE-2022-39952 affecting F...

9.8CVSS9.9AI score0.99815EPSS
SaveExploits7
Rows per page
Query Builder