MAL-2025-40472 Malicious code in yeti-nectar-cny089-project (npm)

The package yeti-nectar-cny089-project was found to contain malicious code...

Malicious code in nectar-uplift-lgk654-project (npm)

The package nectar-uplift-lgk654-project was found to contain malicious code...

Malicious code in nugget-nectar-ayv886-project (npm)

The package nugget-nectar-ayv886-project was found to contain malicious code...

Malicious code in ocean-nectar-qxl127-project (npm)

The package ocean-nectar-qxl127-project was found to contain malicious code...

MAL-2025-27195 Malicious code in nectar-4fmc5-0l8ls-juniper-project (npm)

The package nectar-4fmc5-0l8ls-juniper-project was found to contain malicious code...

Malicious code in peony-nectar-hml556-project (npm)

The package peony-nectar-hml556-project was found to contain malicious code...

Malicious code in albatross-nectar-lhr501-project (npm)

The package albatross-nectar-lhr501-project was found to contain malicious code...

PT-2024-27890 · WordPress · Salient Core

Name of the Vulnerable Software and Affected Versions: Salient Core plugin for WordPress versions up to, and including, 2.0.7 Description: The Salient Core plugin for WordPress is vulnerable to Local File Inclusion via the nectar icon shortcode icon linea attribute. This allows authenticated...

CVE-2023-48749

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme nectar Salient Core allows Stored XSS.This issue affects Salient Core: from n/a through 2.0.2...

CVE-2023-48748

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme nectar Salient Core allows Reflected XSS.This issue affects Salient Core: from n/a through 2.0.2...

CVE-2023-48749

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme nectar Salient Core allows Stored XSS.This issue affects Salient Core: from n/a through 2.0.2...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme nectar Salient Core allows Stored XSS.This issue affects Salient Core: from n/a through 2.0.2...

CVE-2023-48748

CVE-2023-48748 is a Cross-Site Scripting (XSS) vulnerability in WordPress plugin Salient Core (Theme Salient Core). Affected versions are

CVE-2023-48749

CVE-2023-48749: Salient Core for WordPress is affected by an Stored XSS due to improper input neutralization in web page generation. The vulnerability applies to Salient Core versions

CVE-2023-48749: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme nectar Salient Core allows Stored XSS.This issue affects Salient Core: from n/a through 2.0.2...

CVE-2023-48748: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme nectar Salient Core allows Reflected XSS.This issue affects Salient Core: from n/a through 2.0.2...

CVE-2018-13586

The mintToken function of a smart contract implementation for Nectar NCTR, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for Nectar NCTR, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13586

The mintToken function of a smart contract implementation for Nectar NCTR, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13586

CVE-2018-13586 affects Nectar (NCTR) token: the mintToken function in the smart contract has an integer overflow that allows the contract owner to set any user’s balance to an arbitrary value. This is documented in NVD/Nectar CVE entries. Exploitation status and concrete remediation steps are not...