MAL-2025-66942 Malicious code in beneficial-brown-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41408f56057406a50d0407bc5a5fa533758c7bab3547f4d3364e1892cf4dd6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53208

Malicious code in mixed-brown-mink npm...

EUVD-2025-55159

Malicious code in cooperative-brown-lark npm...

EUVD-2025-53670

Malicious code in involved-brown-bonobo npm...

EUVD-2025-53450

Malicious code in local-brown-jackal npm...

EUVD-2025-55815

Malicious code in armed-brown-loon npm...

EUVD-2025-53167

Malicious code in moral-brown-orangutan npm...

EUVD-2006-5153

Malware in sbrugna...

EUVD-2006-0928

Malware in sbrugna...

EUVD-2024-52889

Malicious code in bioql PyPI...

MAL-2025-10826 Malicious code in @zalastax/nolb-brown (npm)

The package @zalastax/nolb-brown was found to contain malicious code...

Malicious code in @zalastax/nolb-brown (npm)

The package @zalastax/nolb-brown was found to contain malicious code...

CVE-2025-53187

CVE-2025-53187 affects ABB ASPECT FW; root cause is debugging code included in the market release, enabling authentication bypass. Impact includes unauthenticated actions such as changing system time, accessing files, and invoking functions, potentially leading to unauthenticated RCE. All ASPECT ...

PT-2025-32565 · Abb · Abb Aspect

Name of the Vulnerable Software and Affected Versions: ABB Aspect versions prior to 3.08.04-s01 Description: An authorization bypass exists due to a user-controlled key. Recommendations: Update ABB Aspect to version 3.08.04-s01 or later...

CVE-2024-50535

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kyle M Brown Step by Step step-by-step allows Stored XSS.This issue affects Step by Step: from n/a through = 0.4.5...

CVE-2024-55989

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kyle M Brown WP Simple Pay Lite Manager stripe-manager allows SQL Injection.This issue affects WP Simple Pay Lite Manager: from n/a through = 1.4...

CVE-2024-55989 WordPress WP Simple Pay Lite Manager Plugin <= 1.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kyle M Brown WP Simple Pay Lite Manager stripe-manager allows SQL Injection.This issue affects WP Simple Pay Lite Manager: from n/a through = 1.4...

CVE-2024-55989 WordPress WP Simple Pay Lite Manager Plugin <= 1.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kyle M. Brown WP Simple Pay Lite Manager allows SQL Injection.This issue affects WP Simple Pay Lite Manager: from n/a through 1.4...

New Phishing Kit Leverages SMS, Voice Calls to Target Cryptocurrency Users

A novel phishing kit has been observed impersonating the login pages of well-known cryptocurrency services as part of an attack cluster codenamed CryptoChameleon that's designed to primarily target mobile devices. "This kit enables attackers to build carbon copies of single sign-on SSO pages, the...

apalarivertour.brownpapertickets.com Cross Site Scripting vulnerability OBB-3857665

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...