Lucene search
+L

63 matches found

Github Security Blog
Github Security Blog
•added 2026/09/10 10:46 a.m.•4 views

Malicious code in express-image-bunker (npm)

The package express-image-bunker was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:46 a.m.•5 views

Malicious code in express-bunker-i18n (npm)

The package express-bunker-i18n was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/21 11:53 a.m.•5 views

Malware in express-bunker

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/08/21 11:53 a.m.•23 views

Malicious Package

Overview express-bunker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/27 10:59 p.m.•5 views

Malicious code in express-bunker (npm)

Source: amazon-inspector 68139b9a62e1d546de6ce2e46d5203782dbf54f1af2edbd2b8f509528eb0f000 [email protected] ships a postinstall script that performs an HTTP GET to a hardcoded bare IP over plain HTTP http://130.49.177.51:18080/p/dc-20260627-yandex-geobase at npm install time, transmitting the...

6.1AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/07/13 9:31 p.m.•33 views

MAL-2026-10500 Malicious code in express-bunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68139b9a62e1d546de6ce2e46d5203782dbf54f1af2edbd2b8f509528eb0f000 [email protected] ships a postinstall script that performs an HTTP GET to a hardcoded bare IP over plain HTTP...

6.1AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/13 9:31 p.m.•48 views

Malicious code in express-bunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68139b9a62e1d546de6ce2e46d5203782dbf54f1af2edbd2b8f509528eb0f000 [email protected] ships a postinstall script that performs an HTTP GET to a hardcoded bare IP over plain HTTP...

6AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-25039

Malicious code in bioql PyPI...

4.8CVSS5.9AI score0.00487EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/08/17 4:13 p.m.•37 views

CVE-2025-8066

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This issue affects Bunker Web: 1.6.2...

4.8CVSS5.9AI score0.00487EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/15 4:15 p.m.•21 views

CVE-2025-8066

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This issue affects Bunker Web: 1.6.2...

4.8CVSS0.00487EPSS
SaveExploits0References3
Mend
Mend
•added 2025/08/15 4:10 p.m.•8 views

CVE-2025-8066

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This issue affects Bunker Web: 1.6.2...

4.8CVSS5.8AI score0.00487EPSS
SaveExploits0References5
CVE
CVE
•added 2025/08/15 4:10 p.m.•63 views

CVE-2025-8066

CVE-2025-8066 is a reported open redirect vulnerability in Bunkerity Bunker Web (Linux) affecting version 1.6.2 . The issue is described as a URL redirection to an untrusted site, enabling phishing attempts. The available connected sources consistently identify the vulnerable component as the Bun...

4.8CVSS5.8AI score0.00487EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/08/15 4:10 p.m.•18 views

CVE-2025-8066 Bunker Web 1.6.2 - Uncontrolled external site redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This issue affects Bunker Web: 1.6.2...

4.8CVSS5.8AI score0.00487EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/08/15 4:10 p.m.•12 views

CVE-2025-8066 Bunker Web 1.6.2 - Uncontrolled external site redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This issue affects Bunker Web: 1.6.2...

4.8CVSS5.8AI score0.00487EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/08/15 4:10 p.m.•39 views

CVE-2025-8066 Bunker Web 1.6.2 - Uncontrolled external site redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This issue affects Bunker Web: 1.6.2...

4.8CVSS0.00487EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/15 12:00 a.m.•7 views

CVE-2025-8066: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This issue affects Bunker Web: 1.6.2...

4.8CVSS5.9AI score0.00487EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/15 12:00 a.m.•25 views

PT-2025-33496

Name of the Vulnerable Software and Affected Versions: Bunkerity Bunker Web version 1.6.2 Description: A URL Redirection to Untrusted Site 'Open Redirect' vulnerability exists in Bunkerity Bunker Web on Linux, which can be leveraged for phishing attacks. Recommendations: At the moment, there is n...

4.8CVSS5.8AI score0.00487EPSS
SaveExploits0References9
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-16349 Malicious code in bunker-json (npm)

The package bunker-json was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•9 views

Malicious code in express-image-bunker (npm)

The package express-image-bunker was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•8 views

Malicious code in bunker-cache (npm)

The package bunker-cache was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder