Lucene search
K

25 matches found

EUVD
EUVD
added 2025/11/12 7:18 p.m.1 views

EUVD-2025-143249

Malicious code in anna-salwa-tea npm...

6.6AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 7:18 p.m.2 views

Malicious code in anna-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a99818fee7cd0f2f61496468aa6b190495c8fa49efa03cf5c001016686997ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2006-6173

Malware in sbrugna...

7.5CVSS6.4AI score0.01202EPSS
Exploits0References6
Openbugbounty
Openbugbounty
added 2024/02/11 11:38 a.m.5 views

anna-minasyan.com Cross Site Scripting vulnerability OBB-3851428

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/06/20 11:57 p.m.14 views

anna-jagmann.de Cross Site Scripting vulnerability OBB-3451128

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

10AI score
Exploits0
Malwarebytes
Malwarebytes
added 2023/03/27 9:0 a.m.13 views

Solving the password’s hardest problem with passkeys, featuring Anna Pobletts

How many passwords do you have? If you're at all like our Lock and Code host David Ruiz, that number hovers around 200. But the important follow up question is: How many of those passwords can you actually remember on your own? Prior studies suggest a number that sounds nearly...

6.8AI score
Exploits0
Openbugbounty
Openbugbounty
added 2022/09/11 9:15 p.m.11 views

library.annauniv.edu Cross Site Scripting vulnerability OBB-2914398

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Github Security Blog
Github Security Blog
added 2022/06/25 12:0 a.m.20 views

Code injection in concrete CMS

Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which could lead to an RCE. Fixed by enforcing ‘concretesecure’ instead of ‘concrete’. Concrete now only makes requests over https even a request comes in via http...

9.8CVSS0.9AI score0.00663EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2022/06/25 12:0 a.m.15 views

GHSA-6XC4-7FMM-65Q2 Code injection in concrete CMS

Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which could lead to an RCE. Fixed by enforcing ‘concretesecure’ instead of ‘concrete’. Concrete now only makes requests over https even a request comes in via http...

8CVSS9.6AI score0.00663EPSS
Exploits0References7
NVD
NVD
added 2022/06/24 3:15 p.m.13 views

CVE-2022-21829

Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which could lead to an RCE. Fixed by enforcing ‘concretesecure’ instead of ‘concrete’. Concrete now only makes requests over https even a request comes in via http...

9.8CVSS0.00663EPSS
Exploits0References3
OSV
OSV
added 2022/06/24 3:15 p.m.1 views

CVE-2022-21829

Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which could lead to an RCE. Fixed by enforcing ‘concretesecure’ instead of ‘concrete’. Concrete now only makes requests over https even a request comes in via http...

9.8CVSS7.1AI score
Exploits0References3
Prion
Prion
added 2022/06/24 3:15 p.m.9 views

Cross site request forgery (csrf)

Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which could lead to an RCE. Fixed by enforcing ‘concretesecure’ instead of ‘concrete’. Concrete now only makes requests over https even a request comes in via http...

7.5CVSS9.5AI score0.00663EPSS
Exploits0References3Affected Software1
Openbugbounty
Openbugbounty
added 2022/03/31 11:0 p.m.13 views

anna-live.com Cross Site Scripting vulnerability OBB-2457889

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploits0
Openbugbounty
Openbugbounty
added 2021/11/08 4:46 p.m.8 views

anna-bella.org Improper Access Control vulnerability OBB-2249776

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.6AI score
Exploits0
The Hacker News
The Hacker News
added 2017/12/13 5:36 a.m.12 views

Three Hackers Plead Guilty to Creating IoT-based Mirai DDoS Botnet

The U.S. federal officials have arrested three hackers who have pleaded guilty to computer-crimes charges for creating and distributing Mirai botnet that crippled some of the world's biggest and most popular websites by launching the massive DDoS attacks last year. According to the federal court...

7.1AI score
Exploits0
hackapp
hackapp
added 2016/04/01 10:1 a.m.5 views

Anna Elsa Puzzle - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Anna Elsa Puzzle published at the 'play' market has multiple vulnerabilities...

1.3AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:24 a.m.11 views

Anna Elsa Dolls - Base64 encoded String, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Anna Elsa Dolls published at the 'play' market has multiple vulnerabilities...

0.3AI score
Exploits0References1Affected Software1
The Hacker News
The Hacker News
added 2011/09/02 6:14 p.m.5 views

Indian Government Computers are also Corrupted like Government

Indian Government Computers are also Corrupted like Government One of the Indian Hacker named "nomcat" claim to hack into the Indian Prime Ministers Office Computers and install R.A.T remote administration tool in them. He also Expose the Vulnerability in Income Tax website and Database...

7.8AI score
Exploits0
The Hacker News
The Hacker News
added 2011/05/05 6:9 p.m.11 views

'The Hacker News' Magazine - Social Engineering Edition - Issue 02 - May,2011 Released !

'The Hacker News' Magazine - Social Engineering Edition - Issue 02 - May,2011 Released ! We are happy to Announce that 'The Hacker News' THN Magazine Issue 02 May 2011 is Out . This time we cover "Social Engineering Edition" . The Index of Content is as Given Below : Social Engineering Opsony By...

6.8AI score
Exploits0
0day.today
0day.today
added 2008/12/29 12:0 a.m.14 views

Flexphpsite 0.0.1 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Flexphpsite 0.0.1 Auth Bypass SQL Injection Vulnerability =========================================================== Autore: x0r Cms: Flexphpsiteen Version: 0.0.1 Download:...

7.1AI score
Exploits0
Rows per page
Query Builder