15828 matches found
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the toString function in environments where the VEGADEBUG global variable is present. An attacker can execute arbitrary JavaScript code by supplying crafted Vega JSON definitions that abuse expression...
CVE-2025-13060
A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /viewsurvey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and m...
6 Best CTEM Vendors: A Head-to-Head Comparison
Your team just ran a vulnerability scan and now you’re staring at a list of thousands of CVEs. The big question is, what do you fix first? Relying on CVSS scores alone doesn’t tell you which of these vulnerabilities are actually exploitable in your environment or which ones protect your most...
EUVD-2025-176331
Malicious code in slow-promise-delta-root-view npm...
EUVD-2025-177789
Malicious code in mock-sandbox-private-stub-view npm...
EUVD-2025-180103
Malicious code in beta-enum-notify-view-stack npm...
EUVD-2025-179159
Malicious code in emulate-private-alpha-decompress-view npm...
Malicious code in cluster-wind-fork-view-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5047c654c3a5d136a00aaba828d7028a4483a1b72fb55a1d2ffff40fcb45f3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gamma-old-visualize-web-view (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c85b8c83f11198dd37909d77ea949f07b7f4f84ed769cfb14f898b385924bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175847
Malicious code in uglify-view-stub-simulate-short npm...
EUVD-2025-176690
Malicious code in report-water-view-cluster-socket npm...
EUVD-2025-176377
Malicious code in signal-view-stub-interface-async npm...
EUVD-2025-178789
Malicious code in gamma-old-visualize-web-view npm...
EUVD-2025-178383
Malicious code in integer-kappa-sigma-double-view npm...
EUVD-2025-179389
Malicious code in data-virtualize-cluster-view-phi npm...
EUVD-2025-180104
Malicious code in benchmark-view-mu-cat-virtualize npm...
Malicious code in private-abstract-optimize-view-rain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb70db1790bb65e64e2974752452b944ac058868f9967bdcf6799ccfa1ced5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176173
Malicious code in stub-emulate-decompress-view-sandbox npm...