495 matches found
PT-2025-53835
Name of the Vulnerable Software and Affected Versions Whale browser versions prior to 4.35.351.12 Description A flaw exists in Whale browser that allows an attacker to circumvent the Same-Origin Policy within a sidebar environment. This bypass could potentially allow unauthorized access to data o...
PT-2025-53834
Name of the Vulnerable Software and Affected Versions Whale browser versions prior to 4.35.351.12 Description The Whale browser is susceptible to an iframe sandbox escape in a sidebar environment. An attacker can leverage this to bypass security restrictions imposed by the iframe sandbox...
Naver Whale Browser 安全漏洞
Naver Whale Browser is a web browser from Naver, a Korean company that supports user-defined interfaces. A security vulnerability exists in Naver Whale Browser versions prior to 4.35.351.12, which originates from an iframe sandbox escape in the sidebar environment...
CVE-2025-69234: Improperly Implemented Security Check for Standard
Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment...
Naver Whale Browser 安全漏洞
Naver Whale Browser is a web browser from Naver, a South Korean company that supports user-defined interfaces. A security vulnerability exists in Naver Whale Browser versions prior to 4.35.351.12, which stems from a same-origin policy bypass in the sidebar environment...
CVE-2025-69235: Origin Validation Error
Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment...
Command Injection
Overview caffeinated-whale-cli is an A CLI tool to help manage Frappe Docker instances. Affected versions of this package are vulnerable to Command Injection due to improper validation and sanitization of user-supplied site names and bench path inputs in the unlock command. The command constructs...
Incorrect Default Permissions
Overview caffeinated-whale-cli is an A CLI tool to help manage Frappe Docker instances. Affected versions of this package are vulnerable to Incorrect Default Permissions due to insecure file permissions. The cache directory and database file are created without enforcing restrictive access...
EUVD-2025-117274
Malicious code in late-white-whale npm...
MAL-2025-138828 Malicious code in late-white-whale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90eb10c7af4c8cef448526af282d5089bb64071b81a7fe476c4f005710c560fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in late-white-whale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90eb10c7af4c8cef448526af282d5089bb64071b81a7fe476c4f005710c560fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in redundant-coral-whale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da0a610fc94229adcc3d9bd82e45ec8f6fa42a6ca916a4c65d3f2c52a1ff4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117465
Malicious code in costly-aqua-whale npm...
EUVD-2025-117132
Malicious code in redundant-coral-whale npm...
Malicious code in costly-aqua-whale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e11b87589692e13378e5884ac74613c33bf2d49738f658f6a26fe123f4a6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117150
Malicious code in psychological-tan-whale npm...
Malicious code in gradual_whale_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7324ec5e76f23139c5f81906671ac10978db915ab490d583ce24dcce177ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-99279
Malicious code in enormouswhalez3n npm...