38 matches found
Malicious code in libc-ubg-atg (npm)
Source: amazon-inspector 34b176efc9e7e4e5b8a98de769bc40399b2ea2dad869c2b5405f228e648103c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in atg-store-addons (npm)
--- Credit: OpenSSF source...
Malicious code in atg-all-in-wonder-player (npm)
The package atg-all-in-wonder-player was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in atg-breakpoints (npm)
--- Credit: OpenSSF source...
Malicious code in atg-superagent-retry-delay (npm)
Source: ossf-package-analysis 75f0747e74a5e0a7d519918b8aceef9e8f4f9eaa0ad1854c1954276bb1c5166c The OpenSSF Package Analysis project identified 'atg-superagent-retry-delay' @ 100.100.100 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...
Oracle ATG Commerce Panel - Detect
Oracle ATG Commerce panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle ATG Commerce panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Oracle ATG Commerce Panel - Detect',...
EUVD-2026-47338
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: ATG Portals. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attac...
CVE-2026-61129
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: ATG Portals. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attac...
CVE-2026-61129: Improper Authentication
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: ATG Portals. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attac...
Malware in @atg-aml-shared/kyc-domain
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview atg-atgse is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malware in atg-atgse
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-659 Malicious code in atg-atgse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a895bff954a7aac56b4897d5f8582caded83251256152d5f9b7d55a53eedca The package atg-atgse was found to contain malicious code. Source: ghsa-malware c7041c7bfbb06e2e710b58e8aeff432e4774d756db057975426c046c7ea06339 Any...
CVE-2025-58428
The TLS4B ATG system's SOAP-based interface is vulnerable due to its accessibility through the web services handler. This vulnerability enables remote attackers with valid credentials to execute system-level commands on the underlying Linux system. This could allow the attacker to achieve remote...
CVE-2025-55067: Integer Overflow or Wraparound
The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history...
PT-2025-43550
Name of the Vulnerable Software and Affected Versions TLS4B ATG system affected versions not specified Description The TLS4B ATG system is susceptible to issues stemming from improper handling of Unix time values exceeding the 2038 epoch rollover. Upon reaching January 19, 2038, the system clock...
CVE-2025-58428: Improper Neutralization of Special Elements used in a Command
The TLS4B ATG system's SOAP-based interface is vulnerable due to its accessibility through the web services handler. This vulnerability enables remote attackers with valid credentials to execute system-level commands on the underlying Linux system. This could allow the attacker to achieve remote...
MAL-2025-15003 Malicious code in atg-all-in-wonder-player (npm)
The package atg-all-in-wonder-player was found to contain malicious code...
