Malicious code in saku-au-idun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c7fe4e1afb2b84262c45dfe7bb5f67974fafb8ae0683a85bda3f6e2106cf21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2024-19363

Malicious code in bioql PyPI...

EUVD-2025-21647

Malicious code in bioql PyPI...

EUVD-2024-51511

Malicious code in bioql PyPI...

EUVD-2025-19017

Malicious code in bioql PyPI...

EUVD-2024-42401

Malicious code in bioql PyPI...

CVE-2025-32330

The Android operating system is vulnerable to an information disclosure flaw in the generateRandomPassword() function within the LocalBluetoothLeBroadcast.java module. This issue stems from an insecure default value during resource initialization, which could allow an attacker to intercept the Au...

Linux Distros Unpatched Vulnerability : CVE-2021-34146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing...

CVE-2025-48153

Cross-Site Request Forgery CSRF vulnerability in Atakan Au Import CDN-Remote Images import-cdn-remote-images allows Stored XSS.This issue affects Import CDN-Remote Images: from n/a through = 2.1.2...

CVE-2025-48153

Cross-Site Request Forgery CSRF vulnerability in Atakan Au Import CDN-Remote Images import-cdn-remote-images allows Stored XSS.This issue affects Import CDN-Remote Images: from n/a through = 2.1.2...

PT-2025-29722 · Unknown · Atakan Au Import Cdn-Remote Images

Name of the Vulnerable Software and Affected Versions: Atakan Au Import CDN-Remote Images versions n/a through 2.1.2 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Atakan Au Import CDN-Remote Images, which can lead to Stored Cross-Site Scripting XSS. Recommendations: Updat...

CVE-2025-50048

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through ...

CVE-2025-50048

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through ...

CVE-2025-50048

CVE-2025-50048 is a stored XSS in WordPress plugin “Automatically Hierarchic Categories in Menu” (versions up to and including 2.0.9). The root cause is improper/input neutralization during web page generation, allowing injection of malicious scripts. Exploitation could affect users interacting w...

CVE-2025-50048: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through ...

CVE-2024-21749

Cross-Site Request Forgery CSRF vulnerability in Atakan Au 1 click disable all.This issue affects 1 click disable all: from n/a through 1.0.1...

CVE-2024-47365

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through ...

The vulnerability of the Tarte au Citron module in the Drupal CMS system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Tarte au Citron module in the Drupal CMS system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2024-13298

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Tarte au Citron allows Cross-Site Scripting XSS.This issue affects Tarte au Citron: from 2.0.0 before 2.0.5...

CVE-2024-13298

The Drupal Tarte au Citron module (versions 2.0.0 to 2.0.4 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. A malicious actor can exploit this to perform XSS attacks remotely, potentially leading to malicious JavaScript insertion or pa...