Lucene search
K

43 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 7:26 a.m.2 views

Malicious code in bernard-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6625c9dab28babc6f72ac6b9be6cac04246052973888fd2bc60a485c5ffbba6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSV
OSV
added 2025/11/11 7:26 a.m.1 views

MAL-2025-99945 Malicious code in bernard-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6625c9dab28babc6f72ac6b9be6cac04246052973888fd2bc60a485c5ffbba6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
EUVD
EUVD
added 2025/11/11 7:26 a.m.1 views

EUVD-2025-79725

Malicious code in bernard-teadev npm...

6.6AI score
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-29311

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00177EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:14 a.m.6 views

CVE-2024-31422

Cross-Site Request Forgery CSRF vulnerability in Philippe Bernard Favicon.This issue affects Favicon: from n/a through 1.3.29...

4.3CVSS5.1AI score0.00177EPSS
Exploits0References1
NVD
NVD
added 2024/04/15 10:15 a.m.10 views

CVE-2024-31422

Cross-Site Request Forgery CSRF vulnerability in Philippe Bernard Favicon.This issue affects Favicon: from n/a through 1.3.29...

4.3CVSS4.6AI score0.00177EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/15 10:8 a.m.14 views

CVE-2024-31422 WordPress Favicon by RealFaviconGenerator plugin <= 1.3.29 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Philippe Bernard Favicon.This issue affects Favicon: from n/a through 1.3.29...

4.3CVSS5AI score0.00177EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/15 10:8 a.m.9 views

CVE-2024-31422 WordPress Favicon by RealFaviconGenerator plugin <= 1.3.29 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Philippe Bernard Favicon.This issue affects Favicon: from n/a through 1.3.29...

4.3CVSS5.1AI score0.00177EPSS
Exploits0References1
CVE
CVE
added 2024/04/15 10:8 a.m.52 views

CVE-2024-31422

CVE-2024-31422 is a CSRF vulnerability in the WordPress Favicon plugin by RealFaviconGenerator. The issue affects the Favicon plugin versions

4.3CVSS5.1AI score0.00177EPSS
Exploits0References1
Openbugbounty
Openbugbounty
added 2024/02/20 6:46 a.m.10 views

bernard-magrez.com Cross Site Scripting vulnerability OBB-3855272

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/08/22 8:8 a.m.13 views

bernard-massard.lu Cross Site Scripting vulnerability OBB-3606735

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/07/07 12:23 a.m.2 views

bernard-notaires.fr Cross Site Scripting vulnerability OBB-3483086

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/07/07 12:22 a.m.4 views

bernard-caiazzo.fr Cross Site Scripting vulnerability OBB-3483081

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/05/10 9:13 p.m.8 views

bernard-minier.com Cross Site Scripting vulnerability OBB-3318988

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2022/08/19 5:1 p.m.16 views

fondsdedotationbernardbuffet.fr Cross Site Scripting vulnerability OBB-2854976

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Krebs on Security
Krebs on Security
added 2022/01/29 6:5 p.m.33 views

Fake Investor John Bernard Sinks Norwegian Green Shipping Dreams

Several articles here have delved into the history of John Bernard, the pseudonym used by a fake billionaire technology investor who tricked dozens of startups into giving him tens of millions of dollars. Bernards latest victim -- a Norwegian company hoping to build a fleet of environmentally...

6.9AI score
Exploits0
Krebs on Security
Krebs on Security
added 2020/10/07 2:58 p.m.27 views

Promising Infusions of Cash, Fake Investor John Bernard Walked Away With $30M

September featured two stories on a phony tech investor named John Bernard, a pseudonym used by a convicted thief named John Clifton Davies whos fleeced dozens of technology companies out of an estimated $30 million with the promise of lucrative investments. Those stories prompted a flood of tips...

6.9AI score
Exploits0
Krebs on Security
Krebs on Security
added 2020/09/25 1:21 p.m.36 views

Who is Tech Investor John Bernard?

John Bernard, the subject of a story here last week about a self-proclaimed millionaire investor who has bilked countless tech startups, appears to be a pseudonym for John Clifton Davies, a U.K. man who absconded from justice before being convicted on multiple counts of fraud in 2015. Prior to hi...

7AI score
Exploits0
Openbugbounty
Openbugbounty
added 2020/09/07 7:56 a.m.7 views

bernard-magrez.com Cross Site Scripting vulnerability OBB-1310238

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
Exploits0
UbuntuCve
UbuntuCve
added 2017/12/14 4:29 p.m.18 views

CVE-2017-17526

Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

8.8CVSS7.2AI score0.00545EPSS
Exploits0References3
Rows per page
Query Builder