CVE-2026-88391

Northstar dromara/northstar, quantitative trading platform = 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar/, so /h2-console is exposed with no authentication and the embedded H2 DB uses default sa / empty password. Any network-reachable attacker can run arbitrary...

CVE-2026-88391

The Northstar quantitative trading platform (dromara/northstar) versions

EUVD-2026-92443

Northstar dromara/northstar, quantitative trading platform = 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar/, so /h2-console is exposed with no authentication and the embedded H2 DB uses default sa / empty password. Any network-reachable attacker can run arbitrary...

CVE-2026-88391

Northstar dromara/northstar, quantitative trading platform = 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar/, so /h2-console is exposed with no authentication and the embedded H2 DB uses default sa / empty password. Any network-reachable attacker can run arbitrary...

CVE-2024-28741-northstar-agent-rce-poc

NorthStar C2 에이전트 RCE 저장형 XSS CVE-2024-28741에 대한 에이전트 RCE PoC, NorthStar C2의 저장형 XSS 취약점. 이 익스플로잇은 여러 개의 악의적인 에이전트 등록 요청을 팀서버로 전송하여 로그 웹 페이지에 기능하는 자바스크립트 페이로드를 점진적으로 구축합니다. 이 XSS를 활용하여 NorthStar C2 에이전트에서 명령을 실행할 수 있습니다. 전체 설명:...

Malicious code in elf-stats-peppermint-northstar-168 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7272 Malicious code in elf-stats-peppermint-northstar-168 (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2022-26959

There are two full read/write Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter of the login.jsp pag...

Malicious code in elf-stats-cheery-northstar-345 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11afb900180826fdc5929d1c3095198004109bd2107d02b1b6cd36c676b8aafd The package elf-stats-cheery-northstar-345 was found to contain malicious code...

EUVD-2025-202824

Malicious code in elf-stats-cheery-northstar-345 npm...

MAL-2025-192485 Malicious code in elf-stats-cheery-northstar-345 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11afb900180826fdc5929d1c3095198004109bd2107d02b1b6cd36c676b8aafd The package elf-stats-cheery-northstar-345 was found to contain malicious code...

MAL-2025-192276 Malicious code in elf-stats-snowy-northstar-860 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060b69056cb70a9b63f02519787bc1ab10049d2dd86aef53a7e777a2176ec8ac The package elf-stats-snowy-northstar-860 was found to contain malicious code...

Malicious code in elf-stats-snowy-northstar-860 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060b69056cb70a9b63f02519787bc1ab10049d2dd86aef53a7e777a2176ec8ac The package elf-stats-snowy-northstar-860 was found to contain malicious code...

EUVD-2025-201115

Malicious code in elf-stats-snowy-northstar-860 npm...

Malicious code in elf-stats-shimmering-northstar-293 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d184651ac378385a72d8a65f81c8002a5d134fd1b3be42f5804316c556939a5 The package elf-stats-shimmering-northstar-293 was found to contain malicious code...

EUVD-2025-200943

Malicious code in elf-stats-cocoa-northstar-632 npm...

EUVD-2025-200790

Malicious code in elf-stats-starlit-northstar-873 npm...

EUVD-2025-200823

Malicious code in elf-stats-shimmering-northstar-293 npm...

Malicious code in elf-stats-cocoa-northstar-632 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617eee1622896f30c465f8c9f1eaa6740f06b3f91a2001e60ebc99e353bf28dc The package elf-stats-cocoa-northstar-632 was found to contain malicious code...

Malicious code in elf-stats-starlit-northstar-873 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c2cc5d2543003fa84ebbe677a2f636913b0cf1235b2975c9147eeb1839045d The package elf-stats-starlit-northstar-873 was found to contain malicious code...