Lucene search
+L

592 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 12:41 a.m.3 views

Malicious code in husky-gold-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e0fe0cdca2e4293032f817fb2890cd7b7153e89890681c87cd38ad0e5b8083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/11/11 12:41 a.m.1 views

MAL-2025-68751 Malicious code in husky-gold-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e0fe0cdca2e4293032f817fb2890cd7b7153e89890681c87cd38ad0e5b8083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
EUVD
EUVD
added 2025/11/10 5:21 p.m.1 views

EUVD-2025-47213

Malicious code in huskymousez3n npm...

6.6AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/29 7:32 a.m.6 views

CVE-2025-11735

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the phrase parameter in all versions up to, and including, 1.3.7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

7.5CVSS6.7AI score0.00317EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/10/28 6:18 a.m.7 views

WordPress HUSKY plugin <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter vulnerability

Unauthenticated SQL Injection via phrase Parameter vulnerability discovered by LionTree in WordPress Plugin HUSKY versions = 1.3.7.1...

7.5CVSS7.8AI score0.00317EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/28 5:27 a.m.2 views

CVE-2025-11735 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the phrase parameter in all versions up to, and including, 1.3.7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

7.5CVSS6.4AI score0.00317EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/28 5:27 a.m.10 views

CVE-2025-11735 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the phrase parameter in all versions up to, and including, 1.3.7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

7.5CVSS0.00317EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/28 5:27 a.m.21 views

CVE-2025-11735

The CVE refers to HUSKY – Products Filter Professional for WooCommerce (WordPress plugin) with a blind SQL Injection via the phrase parameter. Affected versions are all up to and including 1.3.7.1, caused by insufficient escaping and lack of proper query preparation, enabling unauthenticated atta...

7.5CVSS6.4AI score0.00317EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/28 12:0 a.m.12 views

PT-2025-44087

Name of the Vulnerable Software and Affected Versions HUSKY – Products Filter Professional for WooCommerce plugin for WordPress versions up to and including 1.3.7.1 Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is susceptible to blind SQL Injection...

7.5CVSS6.8AI score0.00317EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/10/28 12:0 a.m.9 views

WordPress plugin HUSKY – Products Filter Professional SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists ...

7.5CVSS7.6AI score0.00317EPSS
SaveExploits0References3
Snyk
Snyk
added 2025/10/16 7:51 a.m.4 views

Malicious Package

Overview husky-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-28734

Malware in sbrugna...

5.3CVSS5.6AI score0.00898EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-7385

Malware in sbrugna...

9.8CVSS6.4AI score0.0137EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2019-10601

Malware in sbrugna...

7.8CVSS6.4AI score0.01185EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-28733

Malware in sbrugna...

5.3CVSS5.6AI score0.00948EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-10602

Malware in sbrugna...

9.8CVSS6.4AI score0.02218EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2024-31667

Malicious code in bioql PyPI...

7.2CVSS8.7AI score0.00761EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2024-33795

Malicious code in bioql PyPI...

6.1CVSS8.7AI score0.00315EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-7020

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00671EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.22 views

EUVD-2023-44921

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00477EPSS
SaveExploits0References1
Rows per page
Query Builder