49 matches found
FireStorePwn
FireStorePwn fsp APKを使用したFirestoreデータベース脆弱性スキャナー fspはAPKをスキャンし、Firestoreデータベースの安全でないルールを認証あり/なしでテストします。 セキュリティルールに問題がある場合、攻撃者はデータを盗んだり、改ざんしたり、削除したりして、請求額を上げる可能性があります。 動作の仕組み fspのインストール root@kitploit: sudo wget https://raw.githubusercontent.com/takito1812/FireStorePwn/main/fsp -O /bin/fsp sudo chm...
EUVD-2026-70402
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
CVE-2026-85167 n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
CVE-2026-85167
n8n versions before 2.35.4 and 2.36.x before 2.36.2 are affected by a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query nodes. The root cause is that these operations build their JSON query by interpolating expression values directly int...
Malicious code in firestore-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3242d5a15b769961bcc2e6d24747a7da27e2afd293ea83e6b042eceeb4b97de2 package.json declares a single dependency whose value is a bare HTTP URL https://repo.securityctrl.com/firestore-lite rather than a registry version...
MAL-2026-15534 Malicious code in firestore-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3242d5a15b769961bcc2e6d24747a7da27e2afd293ea83e6b042eceeb4b97de2 package.json declares a single dependency whose value is a bare HTTP URL https://repo.securityctrl.com/firestore-lite rather than a registry version...
Malicious code in 1mi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68ec5fa97918431510ba9ef57d3d601738891094478b5ebf996a3eafa0cb960 This package masquerades as a Cloudflare Worker Telegraf middleware README: 'cfworker-middware-telegraf' but its main module unconditionally forwards...
MAL-2026-3672 Malicious code in 1mi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68ec5fa97918431510ba9ef57d3d601738891094478b5ebf996a3eafa0cb960 This package masquerades as a Cloudflare Worker Telegraf middleware README: 'cfworker-middware-telegraf' but its main module unconditionally forwards...
Malicious Package
Overview firestore-types is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2026-1981
Malicious code in firestore-types npm...
Malicious code in firestore-types (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f49fdc3a0333a330d1304e9ed3b86ba15d469d01211eb308e3af670ec718ee The package firestore-types was found to contain malicious code. Source: ghsa-malware 9fbe3c1ce15b13f945553f027e3d9181facdc632eb1c9d25a12c570a8fe859e...
MAL-2026-219 Malicious code in firestore-types (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f49fdc3a0333a330d1304e9ed3b86ba15d469d01211eb308e3af670ec718ee The package firestore-types was found to contain malicious code. Source: ghsa-malware 9fbe3c1ce15b13f945553f027e3d9181facdc632eb1c9d25a12c570a8fe859e...
EUVD-2025-199166
Malicious code in @lpdjs/firestore-repo-service npm...
Malicious code in @lpdjs/firestore-repo-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614b34b1f58e1d1c7bb2affcabf4ea2cc7954cf6d6f5c389b4d535101664531d The package @lpdjs/firestore-repo-service was found to contain malicious code. Source: ghsa-malware...
Malicious code in firestore-search-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13c5bf9a90c4b5043c0ac86fea67792a3688c2d84fb39eb0f2cf28902fe2e78 The package firestore-search-engine was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191092 Malicious code in firestore-search-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13c5bf9a90c4b5043c0ac86fea67792a3688c2d84fb39eb0f2cf28902fe2e78 The package firestore-search-engine was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199221
Malicious code in firestore-search-engine npm...
EUVD-2023-3097
Malicious code in bioql PyPI...