Malicious Package

Overview stillm4ddpocs-rtest-bravo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in stillm4ddpocs-rtest-bravo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e4272ba48bc8a81c8a76e7948aed6974b40956c151f05a613456e92690f5f2 package.json declares scripts.preinstall = 'node index.js', so npm install auto-executes index.js. The script collects hostname, username, home...

MAL-2026-14378 Malicious code in stillm4ddpocs-rtest-bravo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e4272ba48bc8a81c8a76e7948aed6974b40956c151f05a613456e92690f5f2 package.json declares scripts.preinstall = 'node index.js', so npm install auto-executes index.js. The script collects hostname, username, home...

Malicious Package

Overview bcore-bravo-eslint-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2023-49161

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Guelben Bravo Translate.This issue affects Bravo Translate: from n/a through 1.2...

EUVD-2018-18956

Malware in sbrugna...

EUVD-2018-18955

Malware in sbrugna...

EUVD-2014-7267

Malware in sbrugna...

EUVD-2016-7462

Malware in sbrugna...

EUVD-2016-7459

Malware in sbrugna...

EUVD-2016-7461

Malware in sbrugna...

EUVD-2025-4348

Malicious code in bioql PyPI...

EUVD-2025-31162

Malicious code in bioql PyPI...

EUVD-2025-31164

Malicious code in bioql PyPI...

EUVD-2023-53166

Malicious code in bioql PyPI...

CVE-2025-59406: Cleartext Transmission of Sensitive Information

The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices has a cleartext Auth0 client secret in its codebase. Because application binaries can be trivially decompiled or inspected,...

PT-2025-40412

Name of the Vulnerable Software and Affected Versions Flock Safety Pisco application version 6.21.11 Description The Flock Safety Pisco application for Android contains a cleartext Auth0 client secret within its codebase. Attackers can recover this OAuth secret without elevated privileges by...

CVE-2025-59408

Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections...

CVE-2025-59402

Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader and OS security controls...

CVE-2025-59402

Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader and OS security controls...