12906 matches found
MAL-2025-49353 Malicious code in jsonretype (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5153794835635057bad05300635360b4d6601aee683831850a767d139b4dbc The package jsonretype was found to contain malicious code. Source: ghsa-malware 95bc6e978289ad50ccb9d7e8a9656e9324b18e7d85d9765ac24a158b7d6e8a5e Any...
Malicious code in jsonretype (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5153794835635057bad05300635360b4d6601aee683831850a767d139b4dbc The package jsonretype was found to contain malicious code. Source: ghsa-malware 95bc6e978289ad50ccb9d7e8a9656e9324b18e7d85d9765ac24a158b7d6e8a5e Any...
GHSA-GF93-XCCM-5G6J MARIN3R: Cross-Namespace Vulnerability in the Operator
Summary Cross-namespace Secret access vulnerability in DiscoveryServiceCertificate allows users to bypass RBAC and access Secrets in unauthorized namespaces. Affected Versions All versions prior to v0.13.4 Patched Versions v0.13.4 and later Impact Users with permission to create...
MARIN3R: Cross-Namespace Vulnerability in the Operator
Summary Cross-namespace Secret access vulnerability in DiscoveryServiceCertificate allows users to bypass RBAC and access Secrets in unauthorized namespaces. Affected Versions All versions prior to v0.13.4 Patched Versions v0.13.4 and later Impact Users with permission to create...
CVE-2025-12615
A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...
CVE-2025-11007
The CE21 Suite plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the wpajaxnoprivce21singlesignonsaveapisettings AJAX action in versions 2.2.1 to 2.3.1. This makes it possible for unauthenticated attackers to update the plugin's API...
MARIN3R: Cross-Namespace Vulnerability in the Operator
Cross-namespace Secret access vulnerability in DiscoveryServiceCertificate allows users to bypass RBAC and access Secrets in unauthorized namespaces...
EUVD-2025-37470
A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...
CVE-2025-12615
A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...
CVE-2025-12615
A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...
CVE-2025-12615
CVE-2025-12615 affects PHPGurukul News Portal 1.0. The vulnerability arises from manipulation of the SECRET_KEY in the file /onps/settings.py, leading to the use of a hard-coded cryptographic key. This enables remote exploitation and is described as difficult to exploit, with the exploit publicly...
CVE-2025-12615 PHPGurukul News Portal settings.py hard-coded key
A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...
CVE-2025-12615 PHPGurukul News Portal settings.py hard-coded key
A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...
Malicious code in axis-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09aeea2ea73dbe2f884c0231d608d337880bb8bfd99f38837bb012f8f952eba1 The package axis-tools was found to contain malicious code. Source: ghsa-malware aa8f4e19cbedf81f11461e5e9017bd02d7135a5f126ed59b58b3669d6a7c8156 Any...
PHPGurukul News Portal 安全漏洞
News Portal is a news portal. News Portal has a hard-coded vulnerability that stems from the use of a fixed encryption key for the handling of the SECRETKEY parameter in the file /onps/settings.py. An attacker could exploit this vulnerability to obtain sensitive system information...
PT-2025-44748
Name of the Vulnerable Software and Affected Versions PHPGurukul News Portal version 1.0 Description A security issue exists in PHPGurukul News Portal. Manipulation of the SECRET KEY argument within an unknown function in the /onps/settings.py file results in the use of a hard-coded cryptographic...
MAL-2025-49327 Malicious code in orderly-network-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec35c18a8349d3d2dd52575ffa769fa141be9d1c7b99b0a3e95d994af6acb495 The package orderly-network-config was found to contain malicious code. Source: ghsa-malware...
Malicious code in react-ui-animates (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faea1c84618f620702405ada06f82a0352d57b6f8544e33b87cde589284b5ef1 The package react-ui-animates was found to contain malicious code. Source: ghsa-malware...
Malicious code in kingasd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06cea57ed478ce7d494e8daba01d75b4c47a41bf4cc2bcce462a405cd46ea1a4 The package kingasd was found to contain malicious code. Source: ghsa-malware 13d287b8649f8ab3c2db046c9db2af68601de7e168725a1440764bd4f6c03400 Any...
