262 matches found
Malicious code in fe-bitmovin-player (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb423933317049482de1eccf90e5786861fc4d50647ce5fa521c0aeb7a164d25 The OpenSSF Package Analysis project identified 'fe-bitmovin-player' @ 99.3.0 npm as malicious. It is considered malicious because: - The packag...
MAL-2024-1172 Malicious code in fe-bitmovin-player (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb423933317049482de1eccf90e5786861fc4d50647ce5fa521c0aeb7a164d25 The OpenSSF Package Analysis project identified 'fe-bitmovin-player' @ 99.3.0 npm as malicious. It is considered malicious because: - The packag...
MAL-2024-964 Malicious code in ngpd-merceros-dynamic-forms-fe-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a63c636557949e167ac4cca437135be8c3160f70856ee5911c1817ba2c3f76a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ngpd-merceros-dynamic-forms-fe-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a63c636557949e167ac4cca437135be8c3160f70856ee5911c1817ba2c3f76a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fe-commons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eed6012c5576169a48a200a9b4127c89b4c8e96449f17276d6e108aef5f1a13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8735 Malicious code in fe-commons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eed6012c5576169a48a200a9b4127c89b4c8e96449f17276d6e108aef5f1a13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Apache Doris Authorization Issues Vulnerability
Apache Doris is a modern MPP analytic database product of the U.S. Apache Apache Foundation. Can provide sub-second queries and efficient real-time data analysis. Apache Doris suffers from an authorization issue vulnerability that stems from api /api/snapshot and /api/getlogfile allowing...
fe-wo.at Cross Site Scripting vulnerability OBB-3693472
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious Package
Overview picket-fe-bundler is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...
MAL-2023-668 Malicious code in paysafe-wac-web-chatbot-lib-fe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 607c4692c6a631f5514a914240622977d22fb3fbc467f6bdc0b132532b3454b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-435 Malicious code in fe-core-components-vuejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60e569c72a226b7f460fd4ee1792523d0c53a9206b27aef9a6d2774378754ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fe-core-components-vuejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60e569c72a226b7f460fd4ee1792523d0c53a9206b27aef9a6d2774378754ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
fe-univ45sby.ac.id Cross Site Scripting vulnerability OBB-3037080
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
fe-ol.com Cross Site Scripting vulnerability OBB-2976432
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious Package
Overview fe-extension is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
FE File Explorer 11.0.4 Local File Inclusion Exploit
Exploit Title: FE File Explorer 11.0.4 Local File inclusion Exploit Author: Chokri Hammedi Vendor Homepage: https://www.skyjos.com/ Software Link: https://apps.apple.com/us/app/fe-file-explorer-file-manager/id510282524 Version: 11.0.4 Tested on: iPhone ios 15.6 from ftplib import FTP import...
Malicious Package
Overview fe-core-components is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...
fe-univ45sby.ac.id Cross Site Scripting vulnerability OBB-2807924
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
catalog.santafelibrary.org Cross Site Scripting vulnerability OBB-2702445
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2022-2988 Malicious code in fe-cookie-consent (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f2c513c35080103e2d423a511093c9dc6f961970fde756672902fb81965d8c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...