Lucene search
+L

5222 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/23 2:37 p.m.5 views

Malicious code in other-pkg-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ab79e006d7046832f724293ad8a66618e70b615bb6e223169ac1bda1cae5d4df The OpenSSF Package Analysis project identified 'other-pkg-b' @ 99.0....

7.1AI score
SaveExploits0
OSV
OSV
added 2025/08/23 2:37 p.m.5 views

MAL-2025-41314 Malicious code in other-pkg-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ab79e006d7046832f724293ad8a66618e70b615bb6e223169ac1bda1cae5d4df The OpenSSF Package Analysis project identified 'other-pkg-b' @ 99.0....

7.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/08/23 12:23 a.m.13 views

CVE-2025-50860

SQL Injection in the listdomains function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to access or manipulate database contents via the arananalan POST parameter...

6.5CVSS8.3AI score0.00229EPSS
SaveExploits2References1
NVD
NVD
added 2025/08/22 7:15 p.m.12 views

CVE-2025-50859

Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the template parameter...

6.1CVSS0.00292EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2025/08/22 12:00 a.m.27 views

CVE-2025-50859

Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the template parameter...

0.00292EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2025/08/22 12:00 a.m.20 views

CVE-2025-50858

Reflected Cross-Site Scripting in the List MySQL Databases function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the action parameter...

0.0024EPSS
SaveExploits3References2
CNNVD
CNNVD
added 2025/08/22 12:00 a.m.10 views

EHCP Easy Hosting Control Panel 安全漏洞

EHCP Easy Hosting Control Panel is an open source web hosting control panel from EHCP. A security vulnerability exists in EHCP Easy Hosting Control Panel version 20.04.1.b. The vulnerability stems from a reflective cross-site scripting vulnerability in the action parameter of the List MySQL...

6.1CVSS6AI score0.0024EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.9 views

PT-2025-34486 · Unknown · Easy Hosting Control Panel

Name of the Vulnerable Software and Affected Versions: Easy Hosting Control Panel EHCP version 20.04.1.b Description: The Change Template function in Easy Hosting Control Panel EHCP is susceptible to a reflected cross-site scripting issue. Authenticated attackers can execute arbitrary JavaScript...

6.1CVSS7.1AI score0.00292EPSS
SaveExploits3References6
CVE
CVE
added 2025/08/22 12:00 a.m.29 views

CVE-2025-50859

CVE-2025-50859 affects Easy Hosting Control Panel (EHCP) 20.04.1.b and is a reflected cross-site scripting vulnerability in the Change Template function. An authenticated user can supply a crafted template parameter to trigger arbitrary JavaScript execution, with impact described as partial in so...

6.1CVSS6.8AI score0.00292EPSS
SaveExploits3References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/22 12:00 a.m.5 views

CVE-2025-50858

Reflected Cross-Site Scripting in the List MySQL Databases function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the action parameter...

6.8AI score0.0024EPSS
SaveExploits3References2
RedhatCVE
RedhatCVE
added 2025/08/21 12:26 a.m.18 views

CVE-2025-50926

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...

6.5CVSS8.6AI score0.00258EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.11 views

PT-2025-34226 · Unknown · Easy Hosting Control Panel

Name of the Vulnerable Software and Affected Versions: Easy Hosting Control Panel EHCP version 20.04.1.b Description: A SQL Injection issue exists in the listdomains function of Easy Hosting Control Panel EHCP. Authenticated attackers can potentially access or manipulate database contents via the...

6.5CVSS8.3AI score0.00229EPSS
SaveExploits2References7
CNVD
CNVD
added 2025/08/20 12:00 a.m.10 views

WordPress B Blocks plugin cross-site scripting vulnerability

WordPress B Blocks plugin is a Gutenberg plugin for WordPress, mainly used to enhance the page editing features, provides a variety of beautiful blocks such as buttons, sliders, etc., supports a high degree of customization of the design such as fonts, colors, spacing, etc., and includes...

6.5CVSS6AI score0.0021EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/20 12:00 a.m.16 views

WordPress B Slider plugin server-side request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress B Slider plugin suffers from a server-side request forgery vulnerability that stems from the fsapirequest function not implementing an adequate validation mechanis...

4.3CVSS6.9AI score0.00349EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2024-57923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix availin bytes for s390 zlib HW compression path Since the input data length...

5.5CVSS5.5AI score0.00213EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/08/20 12:00 a.m.13 views

Intel Arc B-Series graphics denial of service vulnerability

Intel Arc B-Series graphics is a line of discrete graphics cards from Intel designed for desktop gaming, content creation and artificial intelligence applications. A denial of service vulnerability exists in Intel Arc B-Series graphics, which stems from a protection mechanism failure that can be...

6.5CVSS6.7AI score0.00134EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/20 12:00 a.m.16 views

WordPress B Slider plugin information disclosure vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress B Slider plugin has an information disclosure vulnerability, the vulnerability stems from a sensitive information disclosure in the getactiveplugins function, which ca...

4.3CVSS6.3AI score0.0035EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/19 8:15 p.m.10 views

CVE-2025-50926

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...

6.5CVSS0.00258EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2025/08/19 12:00 a.m.10 views

PT-2025-33860 · Unknown · Easy Hosting Control Panel

Name of the Vulnerable Software and Affected Versions: Easy Hosting Control Panel EHCP version 20.04.1.b Description: The Easy Hosting Control Panel EHCP contains a SQL injection issue via the id parameter in the List All Email Addresses function. Recommendations: At the moment, there is no...

6.5CVSS8AI score0.00258EPSS
SaveExploits2References4
CVE
CVE
added 2025/08/19 12:00 a.m.24 views

CVE-2025-50926

CVE-2025-50926 affects Easy Hosting Control Panel (EHCP) version 20.04.1.b. The vulnerability is a SQL injection in the id parameter of the List All Email Addresses function, caused by unsanitized input leading to database query manipulation. The PacketStorm entry provides an explicit HTTP GET ex...

6.5CVSS8.5AI score0.00258EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder