501 matches found
MAL-2025-53737 Malicious code in irma-rojak63-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4548040251846be59a691f42e899d57f4a9f96881ae7f1a7e05a6b4501563c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rina-rangi38-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7db9053ae5e653e0fa04274a85adb59f4866b540b8f0f765abc4f32dbc4202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-54466 Malicious code in qori-dodol68-devapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cb8682ae0dcf80266f2ab8cea8a58ce01bb488eeb8926f06ebf89d6d43b524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kurnia-lutis31-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 470b1138bba95c31b4be95e972d832a10c588fd4bd445ce0599b4ee8dbadff8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-53607 Malicious code in ocha-kue54-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774f624aed774da048c2c9d164151db34401e53c399c363019da7a83a9cb9001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nina-ruwet70-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e21711c246aa9b0223bc61c3d2823baaed151a25133905b2042d2501ae8f0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kiki-botok37-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2405f26723c8d6205cf6c7bedea0922256509842d43ccbb988aba5e99b7c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-25439
Malicious code in bioql PyPI...
EUVD-2025-5066
Malicious code in bioql PyPI...
EUVD-2022-0822
Malicious code in bioql PyPI...
Load-Altering Attacks against Power Grids: a Case Study Using the GB-36 Bus System Open Dataset
The growing digitalization and the rapid adoption of high-powered Internet-of-Things IoT-enabled devices e.g., EV charging stations have increased the vulnerability of power grids to cyber threats. In particular, the so-called Load Altering Attacks LAAs can trigger rapid frequency fluctuations an...
CVE-2021-45326
Cross Site Request Forgery CSRF vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests...
CVE-2024-45088
CVE-2024-45088 affects IBM Maximo Asset Management 7.6.1.3 and is a stored cross-site scripting vulnerability. According to IBM and Red Hat sources, authenticated users can inject arbitrary JavaScript into the Maximo Web UI, potentially altering functionality and leading to credentials disclosure...
CVE-2023-49570 Insecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210)
A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software trusts a certificate issued by an entity that isn't authorized to issue certificates. This occurs when the "Basic Constraints" extension in the certificate indicates that it is meant ...
Cross Site Request Forgery (CSRF)
github.com/go-gitea/gitea is vulnerable to Cross Site Request Forgery CSRF. The vulnerability is due to the lack of proper validation and protection mechanisms in the API routes of Gitea, allows unauthorized state-altering POST requests to be executed by attackers on behalf of authenticated users...
CVE-2024-22133
SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave request information. This could lead to creation of request with incorrect approver causing low impact on Confidentiality and Integrity with no impact on Availability of the...
BIT-GITEA-2021-45326
Cross Site Request Forgery CSRF vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests...
CVE-2024-0971
A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content...
CSRF on marking an admin task as complete
Description A data altering method is done through a get request in AdminTaskToggleDoneView, making it vulnerable to csrf attack. In django, get request is considered as a safe method and is not protected against csrf. Proof of Concept python class AdminTaskToggleDoneViewLoginRequiredMixin,...