Lucene search
+L

2995 matches found

osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•11 views

MAL-2025-43615 Malicious code in betelgeuse-react-bootstrap-toml-wolf (npm)

The package betelgeuse-react-bootstrap-toml-wolf was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•8 views

MAL-2025-43643 Malicious code in bootstrap-biomimicry-parsec-cressida (npm)

The package bootstrap-biomimicry-parsec-cressida was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•13 views

MAL-2025-45761 Malicious code in react-bootstrap-telesto-jupiter-transform (npm)

The package react-bootstrap-telesto-jupiter-transform was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•11 views

MAL-2025-44583 Malicious code in heka-hercules-react-bootstrap-darkenergy (npm)

The package heka-hercules-react-bootstrap-darkenergy was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•7 views

MAL-2025-44646 Malicious code in hugo-stop-callback-bootstrap (npm)

The package hugo-stop-callback-bootstrap was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•11 views

MAL-2025-44756 Malicious code in janus-react-bootstrap-less-loader-biomimicry (npm)

The package janus-react-bootstrap-less-loader-biomimicry was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•9 views

MAL-2025-45574 Malicious code in polaris-io-react-bootstrap-polaris (npm)

The package polaris-io-react-bootstrap-polaris was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•10 views

MAL-2025-45759 Malicious code in react-bootstrap-fornax-deimos-prettier-plugin-markdown (npm)

The package react-bootstrap-fornax-deimos-prettier-plugin-markdown was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•11 views

MAL-2025-45760 Malicious code in react-bootstrap-helmet-archaeometry-server (npm)

The package react-bootstrap-helmet-archaeometry-server was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•8 views

MAL-2025-43907 Malicious code in cressida-darkmatter-bootstrap-luna (npm)

The package cressida-darkmatter-bootstrap-luna was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•14 views

MAL-2025-46603 Malicious code in websockets-tool-backend-bootstrap (npm)

The package websockets-tool-backend-bootstrap was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•11 views

MAL-2025-45762 Malicious code in react-bootstrap-zooarchaeology-impulse-janus (npm)

The package react-bootstrap-zooarchaeology-impulse-janus was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/05 5:10 p.m.•13 views

MAL-2025-46474 Malicious code in upgrade-react-bootstrap-antares-airbnb (npm)

The package upgrade-react-bootstrap-antares-airbnb was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/05 5:10 p.m.•13 views

Malicious code in react-bootstrap-zooarchaeology-impulse-janus (npm)

The package react-bootstrap-zooarchaeology-impulse-janus was found to contain malicious code...

7AI score
SaveExploits0
CBLMariner
CBLMariner
•added 2025/09/05 3:08 p.m.•13 views

CVE-2023-7008 affecting package systemd-bootstrap for versions less than 250.3-18

CVE-2023-7008 affecting package systemd-bootstrap for versions less than 250.3-18. A patched version of the package is available...

5.9CVSS7AI score0.00849EPSS
SaveExploits0
osv_cve
osv_cve
•added 2025/09/04 12:15 p.m.•19 views

CVE-2025-41051

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/bootstrap...

5.4CVSS5.7AI score0.00178EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/04 12:15 p.m.•40 views

CVE-2025-41051

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/bootstrap...

5.4CVSS0.00178EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/09/04 11:45 a.m.•14 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the dataAddonlayouts and dataAddonlayoutsexcept parameters in the /apprain/developer/addons/update/bootstrap process. An attacker can execute arbitrary JavaScript code in the context of a user's browser by...

5.4CVSS5.5AI score0.00178EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/04 11:13 a.m.•11 views

CVE-2025-41051 Stored Cross-Site Scripting vulnerability in appRain CMF

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/bootstrap...

5.1CVSS5.7AI score0.00178EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/09/04 6:08 a.m.•12 views

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

...

6.1CVSS6.9AI score0.04009EPSS
SaveExploits1
Rows per page
Query Builder