55 matches found
MAL-2026-15962 Malicious code in @liuliang520500/taobao-topclient (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fce1760178d3d6c27bfbeac47e726c22a17252d491a2988939082c1ead4a4ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @liuliang520500/taobao-topclient (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fce1760178d3d6c27bfbeac47e726c22a17252d491a2988939082c1ead4a4ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview @liuliang520500/taobao-topclient is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
WordPress 淘宝客插件 plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin WordPress 淘宝客插件 versions = 1.1.2...
PT-2024-37982 · Zhongbangkeji · Crmeb
Name of the Vulnerable Software and Affected Versions: ZhongBangKeJi CRMEB versions up to 5.4.0 Description: A critical issue has been found, affecting the function downloadImage of the file app/services/product/product/CopyTaobaoServices.php. This issue leads to deserialization and can be...
taobao-english.cn Cross Site Scripting vulnerability OBB-2546833
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
taobao-english.top Cross Site Scripting vulnerability OBB-2546646
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
taobao-english.com.cn Cross Site Scripting vulnerability OBB-2546644
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
white-box.taobao-english.asia Cross Site Scripting vulnerability OBB-2144223
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
iwatch-strap-sports.taobao-english.store Cross Site Scripting vulnerability OBB-2144218
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mother-shabu.taobao-agent.site Cross Site Scripting vulnerability OBB-2144213
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
team-packet.taobao-english.online Cross Site Scripting vulnerability OBB-2144212
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-21788
In CRMEB 3.1.0+ strict domain name filtering leads to SSRFServer-Side Request Forgery. The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php...
Command Execution Vulnerability in Ke361
Ke361 is an open source Taobao system, based on the latest ThinkPHP3.2 version of the development, to provide a more convenient and secure WEB application development experience, the Taobao system adopts a new architectural design and namespace mechanism, the integration of modular, driven and...
SQL Injection Vulnerability in ke361
Ke361 is an open source Taobao system. ke361 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
Ke361 suffers from SQL injection vulnerability (CNVD-2021-24524)
Ke361 is an open source Taobao system. Ke361 has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database data...
SQL Injection Vulnerability in Ke361 Frontend
Ke361 is an open source Taobao system. Ke361 frontend has a SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...
Ali Want Want windows new version suffers from dll hijacking vulnerability (CNVD-2021-12702)
Aliwangwang is a personal transaction communication software customized for Taobao, which facilitates real-time communication between buyers and sellers in the transaction process. A dll hijacking vulnerability exists in the new version of Ali Want Want for Windows. Attackers can use the...
Hefei Tianxun Information Technology Co., Ltd. pushes Couponer CMS with SQL injection vulnerability
Push Couponer CMS is a completely free Taobao coupon website source code program. Ltd. Push Couponer CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Command Execution Vulnerability in Coupon Pusher CMS
Push Couponer CMS is a completely free Taobao coupon website source code program. A command execution vulnerability exists in Push Couponer CMS, which can be exploited by attackers to execute malicious code...