13371 matches found
CVE-2018-4878-
-cms Server cluster batch identification of cms, batch backup search, batch injection. VIP group version backup...
CVE-2026-36438
CVE-2026-36438: Sensitive information via password reset The Intelbras VIP 1230 B/D G4 versions prior to 6 allows a remote attacker to obtain sensitive information of administrator account via password reset functionality under OutsideCmd file. Discovered by Henrique Koji, Feb 2026. References:...
CLEANSTART-2026-HE21914 Security fix for GO-2026-6237 applied in: kube-vip-fips 1.2.3-r0, kube-vip-fips 0.9.2-r1, kube-vip-fips 1.1.2-r1, kube-vip-fips 1.2.1-r1, kube-vip-fips 1.0.4-r1
Security vulnerability affects the kube-vip-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-DD25385 GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language
Security vulnerability affects the kube-vip-fips package. GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language...
CLEANSTART-2026-UP71652 Security fix for GHSA-frrj-87jh-2772 applied in: kube-vip-fips 1.2.1-r1
Security vulnerability affects the kube-vip-fips package. This issue is resolved in later releases. See references for vulnerability details...
Malicious code in 789bet-vip (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4abb3e4b3a01fecb2b28af9d833cb422943367e8901fabd11cff9125ed891305 [email protected] is a minimal npm package 2 files with no install lifecycle scripts, no network activity, no credential access, and no executab...
Malware in 789bet-vip-online-login
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in 789bet-vip-login
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-18386 Malicious code in 789bet-vip (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89f42dbd0e59f1a22fcf7bc79133a84da721ea78a4be37c6a0fe77775cf28c45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-18387 Malicious code in 789bet-vip-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a79240f04e919e238bfc24e5d18f36dd89f993648f332ddb9fdadd372fd0c60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-18388 Malicious code in 789bet-vip-online-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522618f38a0153018319e8f5fcd675b60d86fb3dfd07ffacd6791a598fd2143e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in 789bet-vip-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d31f1075e7f5e6631dd7dd1fda86b2a75dda2cf5313576ed51d9a803cd7ee8 Package [email protected] ships two files and contains no executable code paths, lifecycle scripts, network calls, filesystem reads, or...
Malware in 789bet-vip
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in 789bet-vip-online-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b80989abaae384f9ef46a0a729b248e21f8e0afb73d56cc051fa3f17d3e1070 Package [email protected] ships only two files and contains no executable install-time hooks, no network activity, no credential...
AZL-112016 CVE-2026-97045 affecting package kube-vip-cloud-provider 0.0.10-11
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...
AZL-112019 CVE-2026-78661 affecting package kube-vip-cloud-provider 0.0.10-10
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...
Malware in @drone-js-ext/vip-badge
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Maccmspro Maccms10 race condition vulnerability
The MaccmsPro Maccms10 version contains a race condition vulnerability. This vulnerability stems from a race condition in Card::useData. Authenticated members can repeat the process of redeeming the same recharge card via the user/buy endpoint. By sending a large number of concurrent requests wit...
Malicious Package
Overview @drone-js-ext/vip-badge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious code in @drone-js-ext/vip-badge (npm)
Source: amazon-inspector 2f7afa65da63d3360d15659ebdcce5f5078fa7bd210e04c069f88834f0c1f75c The package is a zero-functionality stub whose main module index.js exports a Proxy returning no-op functions for any property access. Its only real behavior is a beacon implemented in beacon.cjs that collec...