Lucene search
+L

272 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/10 5:21 p.m.4 views

Malicious code in fit_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8484e107273655473fd3a39f4d12e438dfca4ecb2a74f351a34ac9a61ec7c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2012-3214

Malware in sbrugna...

4.3CVSS6AI score0.10748EPSS
SaveExploits5References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-15635

Malware in sbrugna...

8.8CVSS8.6AI score0.04034EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-3096

Malware in sbrugna...

7.8CVSS8.5AI score0.01395EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-13868

Malware in sbrugna...

7.8CVSS7.7AI score0.01059EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-13905

Malware in sbrugna...

7.8CVSS7.7AI score0.01095EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2019-9083

Malware in sbrugna...

5.3CVSS5.6AI score0.00484EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-27409

Malicious code in bioql PyPI...

5.3CVSS5.6AI score0.00122EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-5387

Malicious code in bioql PyPI...

6.5CVSS9.2AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 12:0 a.m.18 views

CVE-2025-59797

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/id and also URLs for eversports, the user-management page, and the plane page...

5.8CVSS0.00251EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.7 views

Profession Fit 安全漏洞

Profession Fit is a health and employee wellness app from German company Profession Fit. A security vulnerability exists in Profession Fit version 5.0.99 Build 44910, which stems from the fact that a direct request to a URL such as /api/challenges/id may result in authorization bypass...

5.8CVSS6.7AI score0.00251EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/22 12:0 a.m.27 views

CVE-2025-59797

Profession Fit 5.0.99 Build 44910 contains an authorization bypass vulnerability. The issue allows access via a direct request to the API endpoint /api/challenges/{id} and direct URL access to the eversports, user-management, and plane pages, indicating insufficient access control on these resour...

5.8CVSS6.5AI score0.00251EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/11 5:29 p.m.5 views

CVE-2025-5500

A flaw has been found in ZhenShi Mibro Fit App 1.6.3.17499 on Android. This impacts an unknown function of the file AndroidManifest.xml of the component com.xiaoxun.xunoversea.mibrofit. This manipulation causes improper export of android application components. The attack requires local access. T...

5.3CVSS5.9AI score0.00122EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/09 4:32 p.m.24 views

CVE-2025-5500 ZhenShi Mibro Fit App com.xiaoxun.xunoversea.mibrofit AndroidManifest.xml improper export of android application components

A flaw has been found in ZhenShi Mibro Fit App 1.6.3.17499 on Android. This impacts an unknown function of the file AndroidManifest.xml of the component com.xiaoxun.xunoversea.mibrofit. This manipulation causes improper export of android application components. The attack requires local access. T...

5.3CVSS0.00122EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/09/09 4:32 p.m.1 views

CVE-2025-5500 ZhenShi Mibro Fit App com.xiaoxun.xunoversea.mibrofit AndroidManifest.xml improper export of android application components

A flaw has been found in ZhenShi Mibro Fit App 1.6.3.17499 on Android. This impacts an unknown function of the file AndroidManifest.xml of the component com.xiaoxun.xunoversea.mibrofit. This manipulation causes improper export of android application components. The attack requires local access. T...

5.3CVSS5.8AI score0.00122EPSS
SaveExploits0References5
CVE
CVE
added 2025/09/09 4:32 p.m.12 views

CVE-2025-5500

The CVE-2025-5500 entry concerns ZhenShi Mibro Fit App for Android (version 1.6.3.17499) with an improper export of a component in AndroidManifest.xml (com.xiaoxun.xunoversea.mibrofit). The vulnerability is local‑privilege related, requiring local access, and exploitation has been published. Mult...

5.3CVSS5.1AI score0.00122EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/09/09 12:0 a.m.5 views

ZhenShi Mibro Fit App 安全漏洞

ZhenShi Mibro Fit App is a smartwatch companion app from China-based ZhenShi. A security vulnerability exists in ZhenShi Mibro Fit App version 1.6.3.17499, which originates from an improperly exported AndroidManifest.xml component and could lead to a local attack...

5.3CVSS5.3AI score0.00122EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.6 views

PT-2025-36783

Name of the Vulnerable Software and Affected Versions: ZhenShi Mibro Fit App version 1.6.3.17499 Description: A flaw exists in ZhenShi Mibro Fit App that causes improper export of Android application components. The issue impacts an unknown function within the AndroidManifest.xml file of the...

5.3CVSS5.1AI score0.00122EPSS
SaveExploits0References7
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.3 views

Malicious code in @zalastax/nolb-_fit (npm)

The package @zalastax/nolb-fit was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.1 views

MAL-2025-42997 Malicious code in @zalastax/nolb-_fit (npm)

The package @zalastax/nolb-fit was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder