Lucene search
+L

7 matches found

Snyk
Snyk
•added 2026/09/24 12:41 a.m.•13 views

Malicious Package

Overview bigops-auth-interceptor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/22 6:01 p.m.•12 views

Malicious Package

Overview bigops-auth-interceptor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•1 views

PT-2026-95005

Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions 3.0.8 through 3.0.11 Description In the auth interceptor, the functions processScramAuthenticationInfo and processAuthenticationInfo compute the SCRAM ServerSignature or Digest rspauth verification result but fail to a...

3.7CVSS5.7AI score0.00409EPSS
SaveExploits0References13
OSV
OSV
•added 2026/08/05 8:45 a.m.•15 views

MAL-2026-12151 Malicious code in bigops-auth-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018aa5e99b7e6aa9f438b51ee00164801a2eb1c52e78ad123d0c490dced4b67c On require of [email protected], index.js loads vendor.js which selects a platform-specific binary URL, downloads bytes over HTTPS from...

5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/29 4:50 p.m.•16 views

Malicious Package

Overview @sentryx-libraries/auth-interceptor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

9.8CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/14 12:00 a.m.•17 views

PT-2025-3553 · Jeewms · Jeewms

Name of the Vulnerable Software and Affected Versions: JeeWMS versions prior to 2025.01.01 Description: The issue is related to a permission bypass in the component /interceptors/AuthInterceptor.cava. This component is part of the JeeWMS system, and the bypass could potentially allow unauthorized...

7.5CVSS6.8AI score0.00407EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/03/05 12:00 a.m.•23 views

PT-2024-22027 · Jeewms · Jeewms

Name of the Vulnerable Software and Affected Versions: Jeewms versions 3.7 and earlier Description: The issue allows a remote attacker to escalate privileges via the AuthInterceptor component. Recommendations: For Jeewms versions 3.7 and earlier, at the moment, there is no information about a new...

9.8CVSS7.2AI score0.00969EPSS
SaveExploits1References3
Rows per page
Query Builder