122 matches found
Malicious code in mulyono-nasicampur82-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc937be92817203d83301fd3d8ec845afec9322e30b2edcff46d4848e0ad8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-75080 Malicious code in qori-ikan91-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4d92ab5d7aa65e6c369cfec8c60f8a3be53bcfe34f77a74188e57b0fff492e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in painful-plum-flamingo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086023496572a3e9e6a529d343abce1623bcf1759063f3de65f389d728c610fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-65791 Malicious code in umi-tumis73-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f6cabd3fe5b16685cf930e81f7036852a6114b7d50cb1612157fc543f64ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in back_hookworm_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd6d8780bdd0144e85248cd1e8ef24350aa7d7698a58b498f36d8e52d6d5b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-59115 Malicious code in umi-mangut25-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cfc768bef9d55a57347eb5db6d63ec0f2f467a7dc0c80f9456002d13fa79243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in oktafian-dodol41-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe285f739373500dc85e32f8d7573a0fa5cf214e22b617e2fa009933d4848ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-11440: Improper Access Control
A vulnerability was determined in JhumanJ OpnForm up to 1.9.3. Impacted is an unknown function of the file /edit. Executing manipulation can lead to improper access controls. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This patch is called...
OpnForm 安全漏洞
OpnForm is a form builder by Julien Nahum Personal Developer. A security vulnerability exists in OpnForm 1.9.3 and earlier versions, which stems from an improperly access-controlled unknown function in the file/edit, which could lead to a remote attack...
EUVD-2024-16785
Malicious code in bioql PyPI...
EUVD-2022-43515
Malicious code in bioql PyPI...
EUVD-2024-21585
Malicious code in bioql PyPI...
EUVD-2024-16787
Malicious code in bioql PyPI...
Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.
...
CVE-2025-11195
Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file to a name that already exists. This issue stems from a lack of effective verification of the uniqueness of project...
CVE-2025-8453
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...
PT-2025-30975 · Campcodes · Best Courier Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Courier Management System version 1.0 Description: A critical issue exists in Campcodes Courier Management System version 1.0. The vulnerability is a SQL injection that affects an unknown part of the file /edit staff.php. The...
CVE-2024-1010
A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file edit-profile.php. The manipulation of the argument fullname/phone/date of birth/address/date of appointment leads to cross site scripting. It is...