Lucene search
+L

804 matches found

OSV
OSV
added 2025/09/05 5:10 p.m.2 views

MAL-2025-43629 Malicious code in blank-hidden-interior (npm)

The package blank-hidden-interior was found to contain malicious code...

7AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/03 11:08 p.m.6 views

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

...

6.5CVSS7AI score0.00575EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/03 10:00 p.m.10 views

When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox < 126.

...

7.5CVSS9.2AI score0.00541EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2025/08/29 3:05 a.m.208 views

Exploit for Unprotected Alternate Channel in Crushftp

CrushFTP AS2 Authentication Bypass – CVE-2025-54309 Aut...

9.8CVSS7.4AI score0.94362EPSS
SaveExploits7
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/28 12:45 p.m.6 views

Malicious code in blank-hacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb7571808edafde35b1c18ed118dd2c5e38669d09a9b24f81de0d04d2af8617a The OpenSSF Package Analysis project identified 'blank-hacker' @ 1337.0.0 npm as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
OSV
OSV
added 2025/08/28 12:45 p.m.5 views

MAL-2025-41444 Malicious code in blank-hacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb7571808edafde35b1c18ed118dd2c5e38669d09a9b24f81de0d04d2af8617a The OpenSSF Package Analysis project identified 'blank-hacker' @ 1337.0.0 npm as malicious. It is considered malicious because: - The package...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2018-14680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames. CVE-2018-14680 Note that Nessus relies on the...

6.5CVSS7.3AI score0.03753EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2012-6615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ffasssplitoverridecodes function in libavcodec/asssplit.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service NULL pointer dereferen...

4.3CVSS5.8AI score0.02268EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.1 views

Malicious code in slush-ng-blank (npm)

The package slush-ng-blank was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.6 views

Malicious code in blank-slate (npm)

The package blank-slate was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.4 views

MAL-2025-8503 Malicious code in @malware-test-blank-limbo-leers-vying/test-mlw3-blank-limbo-leers-vying (npm)

The package @malware-test-blank-limbo-leers-vying/test-mlw3-blank-limbo-leers-vying was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.4 views

MAL-2025-35125 Malicious code in test-mlw2-cores-blank-areas-blade (npm)

The package test-mlw2-cores-blank-areas-blade was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in test-mlw2-cores-blank-areas-blade (npm)

The package test-mlw2-cores-blank-areas-blade was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.6 views

MAL-2025-15803 Malicious code in blank-ts-monorepo-common (npm)

The package blank-ts-monorepo-common was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.6 views

Malicious code in blank-ts-monorepo-common (npm)

The package blank-ts-monorepo-common was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-33435 Malicious code in slush-ng-blank (npm)

The package slush-ng-blank was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.6 views

MAL-2025-15802 Malicious code in blank-slate (npm)

The package blank-slate was found to contain malicious code...

7.2AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2025/08/12 12:13 a.m.45 views

HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit

Summary When adding a "web link" to the HFS virtual filesystem, the frontend opens it with target="blank" but without the rel="noopener noreferrer" attribute. This allows the opened page to use the window.opener property to change the location of the original HFS tab. Details While most modern...

6.5AI score
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/08/12 12:13 a.m.10 views

GHSA-XCXH-6CV4-Q8P8 HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit

Summary When adding a "web link" to the HFS virtual filesystem, the frontend opens it with target="blank" but without the rel="noopener noreferrer" attribute. This allows the opened page to use the window.opener property to change the location of the original HFS tab. Details While most modern...

6.3CVSS6.5AI score
SaveExploits0References3
OSV
OSV
added 2025/08/11 1:52 p.m.10 views

BIT-LIBPYTHON-2023-24329

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters...

7.5CVSS7AI score0.20459EPSS
SaveExploits3References30
Rows per page
Query Builder