Malicious code in modasiv-kuvu-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3865280f14ef168d773eb58848523039e8e2490ddaf069998c52e795bb516ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140747

Malicious code in kim-ji-bau npm...

EUVD-2025-140745

Malicious code in kim-jiwo-bau npm...

EUVD-2025-141242

Malicious code in joee-bau-imu npm...

EUVD-2025-140743

Malicious code in kim-jiwon-bau npm...

EUVD-2025-140736

Malicious code in kim-memeq-bau npm...

EUVD-2025-140746

Malicious code in kim-jiw-bau npm...

MAL-2025-175029 Malicious code in joee-bau-imu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff293e25cf9528267a75da4d9138ce2a9751e05a3f7a5a5ac39dd130cacec67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbce1bed251bdcca4622ad765119b8c87d29bc5b856c1489914fce26afe86b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143165

Malicious code in budi-memeq-bau npm...

Malicious code in budi-memeq-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b67f6a4710b5a97b5087f97914cfeb558cf275dd15128d2b54dc53e196bb110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147868

Malicious code in tehah-bau-rkonatol npm...

MAL-2025-9806 Malicious code in @zalastax/nolb-_bau (npm)

The package @zalastax/nolb-bau was found to contain malicious code...

schwarzkopf-bau.de Improper Access Control vulnerability OBB-3820303

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bau-art-en.de Improper Access Control vulnerability OBB-3778016

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

schnabel-bau-kaarst.de Improper Access Control vulnerability OBB-3770750

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

g-bau-koblenz.de Improper Access Control vulnerability OBB-3765509

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bau-doc.de Improper Access Control vulnerability OBB-3764872

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

alt-bau-neu.de Cross Site Scripting vulnerability OBB-3472253

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)

Exploit Title: PyLoad 0.5.0 - Pre-auth Remote Code Execution RCE Date: 06-10-2023 Credits: bAu @bauh0lz Exploit Author: Gabriel Lima 0xGabe Vendor Homepage: https://pyload.net/ Software Link: https://github.com/pyload/pyload Version: 0.5.0 Tested on: Ubuntu 20.04.6 CVE: CVE-2023-0297 import...