472 matches found
EUVD-2023-42474
Malicious code in bioql PyPI...
EUVD-2023-37414
Malicious code in bioql PyPI...
EUVD-2025-6370
Malicious code in bioql PyPI...
EUVD-2023-35202
Malicious code in bioql PyPI...
EUVD-2025-22396
Malicious code in bioql PyPI...
EUVD-2024-39076
Malicious code in bioql PyPI...
EUVD-2022-41754
Malicious code in bioql PyPI...
PT-2025-40604
Name of the Vulnerable Software and Affected Versions Minecraft RCON Terminal versions 0.1.0 through 2.0.6 Description The Minecraft RCON Terminal VS Code extension improperly stores passwords in plaintext within the settings.json file using VS Code's configuration API. This affects versions used...
CVE-2025-61680: Plaintext Storage of a Password
Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0...
Minecraft RCON Terminal 安全漏洞
Minecraft RCON Terminal is an extension for Visual Studio Code by Jake T Cooper Personal Developer. A security vulnerability exists in Minecraft RCON Terminal version 2.0.6 and earlier, which stems from the use of the VS Code Configuration API to store passwords in plaintext...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4J-RCE-Proof-Of-Concept CVE-2021-44228 This is a proof of concept of the log4j rce. Here are some links for the CVE-2021-44228: - https://www.lunasec.io/docs/blog/log4j-zero-day - https://github.com/advisories/GHSA-jfh8-c2jp-5v3q - https://github.com/apache/logging-log4j2/pull/608 -...
PT-2025-33881 · Undefined · Undefined
ParsedReport CompletenessMedium 19-08-2025 The emergence of MountBot, which hides its processes https://blog.nicter.jp/2025/08/mountbot 2025aug/ Report completeness: Medium Threats: Mountbot Rapperbot Socat tool Victims: Iot devices, Online game servers, Minecraft servers, Asus wifi routers,...
CVE-2025-54421: Improper Neutralization of Input During Web Page Generation
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting XSS vulnerability in NamelessMC before 2.2.4 allows remote authenticated attackers to inject arbitrary web script or HTML via the defaultkeywords crafted parameter. This vulnerability is fixe...
CVE-2025-54117: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting XSS vulnerability in NamelessMC before 2.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the dashboard text editor component. This vulnerability is fixed ...
Malicious code in minecraft-codes130 (npm)
The package minecraft-codes130 was found to contain malicious code...
Malicious code in minecraft-codes408 (npm)
The package minecraft-codes408 was found to contain malicious code...
Malicious code in minecraft-codes658 (npm)
The package minecraft-codes658 was found to contain malicious code...
Malicious code in minecraft-codes767 (npm)
The package minecraft-codes767 was found to contain malicious code...