1320 matches found
CVE-2025-5342
CVE-2025-5342 affects Zohocorp ManageEngine Exchange Reporter Plus up to version 5721, with a Regular Expression Denial of Service (ReDoS) in the search module. The RedHat/CNA/CIRCL and other feeds corroborate this DoS issue. Impact is described as potential service disruption due to resource exh...
PT-2025-44414
Name of the Vulnerable Software and Affected Versions ManageEngine Exchange Reporter Plus versions prior to 5723 Description ManageEngine Exchange Reporter Plus versions before 5723 are susceptible to Stored Cross Site Scripting within the reports module. This allows for the injection of maliciou...
PT-2025-44411
Name of the Vulnerable Software and Affected Versions ManageEngine Exchange Reporter Plus versions through 5721 Description The software contains a Regular Expression Denial of Service ReDoS issue within its search module. This could potentially disrupt service due to excessive resource consumpti...
ZOHO ManageEngine Exchange Reporter Plus 安全漏洞
ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus prior to version 5723 that stems from a stored cross-site scripting vulnerability in the reporting module...
ZOHO ManageEngine Exchange Reporter Plus 安全漏洞
ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5721 and prior versions, which stems from stored cross-site scripting in the Instant Search option...
PT-2025-44413
Name of the Vulnerable Software and Affected Versions ManageEngine Exchange Reporter Plus versions through 5721 Description The software is susceptible to a Stored Cross Site Scripting issue within the Instant Search functionality. The issue allows for the injection of malicious scripts that are...
ZOHO ManageEngine Exchange Reporter Plus 安全漏洞
ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5721 and prior versions that stems from a regular expression denial of service vulnerability in the search module...
Malicious Package
Overview feature-reporter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in feature-reporter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 005ae57fd871f8d3448911152254fcedcae9af32d34e04f01bb020307c5df831 Any computer that has this package installed or running should be considered...
MAL-2025-48681 Malicious code in feature-reporter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 005ae57fd871f8d3448911152254fcedcae9af32d34e04f01bb020307c5df831 Any computer that has this package installed or running should be considered...
GHSA-47M2-4CR7-MHCW vulnerabilities
Vulnerabilities for packages: dkron, caddy, k8sgateway, ipfs-cluster, kubernetes-dns-node-cache, traefik, kargo, frp, k3s, kubo, kyverno-policy-reporter-ui, spegel, q...
CVE-2025-59530 vulnerabilities
Vulnerabilities for packages: q, ipfs-cluster-fips, coredns, kargo, kyverno-policy-reporter-ui-fips, kyverno-policy-reporter-ui, spegel, traefik, kubernetes-dns-node-cache-fips, caddy, eks-distro, eks-distro-fips, rke2-runtime, syncthing, traefik-fips, k8sgateway, coredns-fips, syncthing-fips,...
GHSA-47M2-4CR7-MHCW vulnerabilities
Vulnerabilities for packages: q, ipfs-cluster-fips, coredns, kargo, kyverno-policy-reporter-ui-fips, kyverno-policy-reporter-ui, spegel, traefik, kubernetes-dns-node-cache-fips, caddy, eks-distro, eks-distro-fips, rke2-runtime, syncthing, traefik-fips, k8sgateway, coredns-fips, syncthing-fips,...
EUVD-2025-32642
Malicious code in karma-verbose-summary-reporter npm...
Malicious code in karma-verbose-summary-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bddd0b5c7d33d7e6539290522eaffda37ebf1db1e6e23a08cdcc4042b785ee57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47994 Malicious code in karma-verbose-summary-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bddd0b5c7d33d7e6539290522eaffda37ebf1db1e6e23a08cdcc4042b785ee57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2017-16765
Malware in sbrugna...
EUVD-2020-5796
Malware in sbrugna...