16258 matches found
Cross-site Scripting (XSS)
Overview vega is a library that implements Vega visualization grammar. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the toString function in environments where the VEGADEBUG global variable is present. An attacker can execute arbitrary JavaScript code by...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the toString function in environments where the VEGADEBUG global variable is present. An attacker can execute arbitrary JavaScript code by supplying crafted Vega JSON definitions that abuse expression...
CVE-2025-13060
A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /viewsurvey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and m...
6 Best CTEM Vendors: A Head-to-Head Comparison
Your team just ran a vulnerability scan and now you’re staring at a list of thousands of CVEs. The big question is, what do you fix first? Relying on CVSS scores alone doesn’t tell you which of these vulnerabilities are actually exploitable in your environment or which ones protect your most...
EUVD-2025-176331
Malicious code in slow-promise-delta-root-view npm...
EUVD-2025-177789
Malicious code in mock-sandbox-private-stub-view npm...
EUVD-2025-180103
Malicious code in beta-enum-notify-view-stack npm...
EUVD-2025-179159
Malicious code in emulate-private-alpha-decompress-view npm...
Malicious code in gamma-old-visualize-web-view (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c85b8c83f11198dd37909d77ea949f07b7f4f84ed769cfb14f898b385924bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176173
Malicious code in stub-emulate-decompress-view-sandbox npm...
EUVD-2025-180257
Malicious code in async-virtualize-private-link-view npm...
EUVD-2025-175728
Malicious code in view-deploy-scale-promise-await npm...
MAL-2025-188413 Malicious code in omega-string-view-double-warn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da844f5894c542a0d1cf7cd454e4368a4f85e5c9fcf2b60c0a06e16e1a40fa0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176690
Malicious code in report-water-view-cluster-socket npm...
MAL-2025-185435 Malicious code in alpha-view-grep-abstract-pipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a59d4ced0983d05722b6d4aa572be26e524f6f5a4608478d2b47cdfcd656793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178824
Malicious code in function-iota-sanitize-view-old npm...
EUVD-2025-176933
Malicious code in public-process-wind-debug-view npm...
EUVD-2025-175724
Malicious code in view-visualize-nu-shell-small npm...