webui

Copyright C 2003-2021 Young Consulting, Inc This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This program is...

CVE-2026-18198

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TAC Information Services Internal and External Trade Inc. GOLDENHORN ONEIT allows Blind SQL Injection. This issue affects GOLDENHORN ONEIT: before Göbeklitepe...

CVE-2026-18198

CVE-2026-18198 is a Blind SQL Injection vulnerability in GOLDENHORN ONEIT , a product by TAC Information Services Internal and External Trade Inc. The flaw stems from improper neutralization of special elements in an SQL command, affecting versions prior to Göbeklitepe . The CVSS 3.1 score is 8.8...

EUVD-2026-71082

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TAC Information Services Internal and External Trade Inc. GOLDENHORN ONEIT allows Blind SQL Injection. This issue affects GOLDENHORN ONEIT: before Göbeklitepe...

CVE-2026-18198 SQL Injection in TAC Information's GoldenHorn

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TAC Information Services Internal and External Trade Inc. GOLDENHORN ONEIT allows Blind SQL Injection. This issue affects GOLDENHORN ONEIT: before Göbeklitepe...

Cybersecurity Firm TAC Security Hits 10,000 Clients, Enters Top 5 in Global VM & AppSec

New York, New York, April 1st, 2026, CyberNewswire...

CVE-2025-13127 XSS in TACAS Consulting's GoldenHorn

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TAC Information Services Internal and External Trade Inc. GoldenHorn allows Cross-Site Scripting XSS. This issue affects GoldenHorn: before 4.25.1121.1...

CVE-2025-13127

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TAC Information Services Internal and External Trade Inc. GoldenHorn allows Cross-Site Scripting XSS. This issue affects GoldenHorn: before 4.25.1121.1...

Malicious code in verify-tac-malasikiblu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1848278c34558fa344142dbfcdae0b480d5eaf718b48ba095c58444fa0e85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146376

Malicious code in verify-tac-malai npm...

EUVD-2025-146373

Malicious code in verify-tac-malasikibaulu npm...

EUVD-2025-146367

Malicious code in verify-tac-mechanical npm...

Malicious code in dajouka-dpas-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1ed0730243555b1db305f68bf602cd630c0948bd6b4d230b87b9732951e9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146370

Malicious code in verify-tac-malasikiu npm...

EUVD-2025-146363

Malicious code in verify-tac-mhal npm...

EUVD-2025-146372

Malicious code in verify-tac-malasikiblu npm...

EUVD-2025-146365

Malicious code in verify-tac-mehnal npm...

Malicious code in verify-tac-malai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356b88f4b47b339f109743a89ee1f0ceb4be4f2f97e5b00f610a4c069dfff991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170447 Malicious code in verify-tac-mehnal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dfe6085d2dc622f40fd183b692cc8ae687903d0e2d59fbcaaf0b78a2243aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-reta-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ed8241b5d9e5aa96f02af1ae354f15e04c2c311976c9f48236de8c7477d537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...