Malicious Package

Overview @openzeppelin-compact/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @cnx-ui/cnx-ui-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-39167 Malicious code in whiskey-5jj-project (npm)

The package whiskey-5jj-project was found to contain malicious code...

CVE-1999-1122

creationtimestamp| type| source ---|---|--- 2025-07-26 20:42:56+00:00| seen| https://gist.github.com/DEEPML1818/fef33d765177026df668a4476d4fe698 2025-07-26 20:48:36+00:00| seen| https://gist.github.com/DEEPML1818/8672f137125674c3936651ee63417e61...

CVE-2025-7277

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-524/...

CVE-2025-49882

creationtimestamp| type| source ---|---|--- 2025-06-17 18:28:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt4q7weug2i...

CVE-2024-13929

creationtimestamp| type| source ---|---|--- 2025-05-22 19:20:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lprtj7csk42q...

CVE-2025-37919

No description is available for this CVE...

CVE-2025-47815

creationtimestamp| type| source ---|---|--- 2025-05-10 22:27:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15914 2025-05-10 23:27:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lou3qtaxuff2 2025-05-11 01:39:05+00:00| seen|...

CGA-R46W-XF92-8HFP

Bulletin has no description...

CVE-2025-24108

creationtimestamp| type| source ---|---|--- 2025-01-27 22:17:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxsm74af2f...

CVE-2024-13230

creationtimestamp| type| source ---|---|--- 2025-01-21 11:11:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113866040035703869 2025-01-21 11:15:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113866055399154408 2025-01-21 11:15:32+00:00| seen|...

CVE-2023-33998

creationtimestamp| type| source ---|---|--- 2024-12-13 16:59:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113646578192607435...

CVE-2024-11664

creationtimestamp| type| source ---|---|--- 2024-11-25 09:04:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113542787862924259 2024-11-25 14:43:09+00:00| published-proof-of-concept| https://t.me/LeakDBMS/1519 2026-07-10 21:07:08+00:00| seen|...

Exploit for Code Injection in Geoserver

CVE-2024-36401 This is a program for checking vulnerabilities...

CVE-2024-30163

creationtimestamp| type| source ---|---|--- 2024-05-19 15:31:55+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10529 2025-05-28 07:25:12+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-30163.yaml 2025-05-31...

CVE-2023-0342

creationtimestamp| type| source ---|---|--- 2024-04-12 13:48:42+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/mongodbopsmanagerdiagnosticarchiveinfo.rb 2024-04-13 12:45:41+00:00| seen| https://t.me/arpsyndicate/4652 2025-02-06 03:13:45+00:00| see...

GHSA-476G-V7HF-CW5M Cross-site Scripting (XSS) in Document Properties Parameter

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.21 or apply this patch manually...

GHSA-HFMG-G39C-5444 pimcore is vulnerable to cross-site scripting in translate module

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.20 or apply this patch manually...

Pimcore vulnerable to improper quoting of filters in Custom Reports

Impact Since a user with 'report' permission can already write arbitrary SQL queries and given the fact that this endpoint is using the GET method no CSRF protection, an attacker can inject an arbitrary query by manipulating a user to click on a link. The impact of this path traversal and arbitra...