Lucene search
+L

15 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/14 5:22 p.m.•19 views

Malicious code in minemeld-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dfe7b8c00b3748b3fe38ffdf3bd69558abb58091ee3347d47003929976ceb457 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.3AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/11/14 5:22 p.m.•14 views

MAL-2025-191791 Malicious code in minemeld-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dfe7b8c00b3748b3fe38ffdf3bd69558abb58091ee3347d47003929976ceb457 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.2AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2019-10135

Malware in sbrugna...

6.1CVSS6.3AI score0.01068EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/22 8:12 a.m.•16 views

CVE-2019-1578

Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser...

6.1CVSS6.8AI score0.01068EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/08/02 12:00 a.m.•17 views

Palo Alto Networks MineMeld XSS

The vulnerability of the Palo Alto Networks MineMeld software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

6.4CVSS5.9AI score0.01068EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2019/07/02 12:00 a.m.•18 views

Palo Alto Networks MineMeld Cross-Site Scripting Vulnerability

Palo Alto Networks MineMeld is a threat intelligence processing tool from Palo Alto Networks, USA. The product extracts metrics from multiple sources and compiles the metrics into multiple formats compatible with AutoFocus, PaloAltoNetworks Next-Generation Firewall, and other Security and...

6.1CVSS6.4AI score0.01068EPSS
SaveExploits0References1
NVD
NVD
•added 2019/07/01 7:15 p.m.•45 views

CVE-2019-1578

Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser...

6.1CVSS6.3AI score0.01068EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2019/07/01 7:15 p.m.•19 views

CVE-2019-1578

Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser...

6.1CVSS6.6AI score0.01068EPSS
SaveExploits0References2
Prion
Prion
•added 2019/07/01 7:15 p.m.•34 views

Cross site scripting

Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser...

4.3CVSS6.2AI score0.01068EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/07/01 6:31 p.m.•38 views

CVE-2019-1578

Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser...

6.2AI score0.01068EPSS
SaveExploits0References2
CVE
CVE
•added 2019/07/01 6:31 p.m.•104 views

CVE-2019-1578

CVE-2019-1578 is a cross-site scripting (XSS) vulnerability in Palo Alto Networks MineMeld up to version 0.9.60. The issue arises from lack of proper input validation in the web UI, allowing an authenticated MineMeld admin to be convinced to input malicious data that could execute arbitrary JavaS...

6.1CVSS6.2AI score0.01068EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/01 12:00 a.m.•8 views

CVE-2019-1578: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser...

6.1CVSS6.2AI score0.01068EPSS
SaveExploits0References2
Palo Alto Networks
Palo Alto Networks
•added 2019/06/27 11:50 p.m.•212 views

Cross Site Scripting (XSS) in MineMeld

A reflected cross-site scripting XSS vulnerability exists in Palo Alto Networks MineMeld. Ref CVE-2019-1578 A remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser. This issue...

2.8AI score0.01068EPSS
SaveExploits0References1Affected Software1
Palo Alto Networks
Palo Alto Networks
•added 2019/06/27 11:50 p.m.•37 views

Cross Site Scripting (XSS) in MineMeld

A reflected cross-site scripting XSS vulnerability exists in Palo Alto Networks MineMeld. Ref CVE-2019-1578 A remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser. This issue...

6.1CVSS6.1AI score0.01068EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/06/27 12:00 a.m.•6 views

PT-2019-2815

Name of the Vulnerable Software and Affected Versions Palo Alto Networks MineMeld versions 0.9.60 and earlier Description The issue exists due to insufficient protection of the web page structure. It may allow a remote attacker to execute arbitrary JavaScript code in the admin's browser if they c...

6.4CVSS0.01068EPSS
SaveExploits0References6
Rows per page
Query Builder