Lucene search
+L

57 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/11 12:41 a.m.•6 views

Malicious code in isolated-ivory-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035137c5f949e0edb6de5406b68eb04eed3ade1f082867bb13f2d684676b80b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 12:41 a.m.•4 views

EUVD-2025-52344

Malicious code in religious-yellow-tapir npm...

6.6AI score
SaveExploits0
OSV
OSV
•added 2025/11/11 12:41 a.m.•5 views

MAL-2025-68987 Malicious code in isolated-ivory-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035137c5f949e0edb6de5406b68eb04eed3ade1f082867bb13f2d684676b80b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/10 6:02 p.m.•6 views

EUVD-2025-49783

Malicious code in moleculartapirz3n npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/10 5:21 p.m.•3 views

Malicious code in civil_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b19e46613b1422f7a604999cb802ad5f908f881daa344fe2ce9cb7749dbe9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-53435

Malicious code in bioql PyPI...

8.7CVSS6.5AI score0.00372EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 9:10 a.m.•12 views

CVE-2024-56802

Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...

8.7CVSS6.9AI score0.00372EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/31 4:15 p.m.•34 views

CVE-2024-56802

Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...

8.7CVSS0.00372EPSS
SaveExploits0References2
OSV
OSV
•added 2024/12/31 3:10 p.m.•20 views

CVE-2024-56802 Tapir allows DeployKey exposure

Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...

8.7CVSS6.8AI score
SaveExploits0References4
CVE
CVE
•added 2024/12/31 3:10 p.m.•63 views

CVE-2024-56802

Tapir (private Terraform registry) exposed a vulnerability in versions 0.9.0 and 0.9.1 where scope-able Deploykeys could be guessed, granting write access to the registry. Root cause: deployment keys with insufficient entropy/validation allowed unauthorized write capabilities. Impact: potential u...

8.7CVSS6.6AI score0.00372EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/12/31 3:10 p.m.•14 views

CVE-2024-56802 Tapir allows DeployKey exposure

Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...

8.7CVSS6.9AI score0.00372EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•2 views

CVE-2024-56802: Improper Authorization

Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...

8.7CVSS5.8AI score0.00372EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/31 12:00 a.m.•13 views

PT-2024-37076 · Tapir · Tapir

Name of the Vulnerable Software and Affected Versions: Tapir versions 0.9.0 through 0.9.1 Description: Tapir is a private Terraform registry. The issue concerns scope-able Deploykeys, where attackers can guess the key to gain write access to the registry. Recommendations: For versions 0.9.0 and...

8.7CVSS7.5AI score0.00372EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/12/31 12:00 a.m.•14 views

Tapir 授权问题漏洞

Tapir is a private Terraform registry for PacoVK individual developers. An authorization issue vulnerability exists in Tapir version 0.9.0 and 0.9.1. An attacker exploiting this vulnerability could guess keys to gain write access to the registry...

8.7CVSS6.8AI score0.00372EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2018/10/29 12:52 p.m.•23 views

tapir-store.de XSS vulnerability

Open Bug Bounty ID: OBB-692033 Description| Value ---|--- Affected Website:| tapir-store.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

0.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/08/18 6:56 p.m.•11 views

tapir-store.de XSS vulnerability

Vulnerable URL: https://www.tapir-store.de/user/account.html Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 575885 VIP website status:| No Check tapir-store.d...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/03/27 10:10 a.m.•8 views

tapir-store.de XSS vulnerability

Open Bug Bounty ID: OBB-221494 Description| Value ---|--- Affected Website:| tapir-store.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

6.4AI score
SaveExploits0
Rows per page
Query Builder