102 matches found
EUVD-2025-50008
Malicious code in inclinedcardinalz3n npm...
EUVD-2025-49491
Malicious code in renewedcardinalz3n npm...
EUVD-2025-45628
Malicious code in rawcardinalz3n npm...
EUVD-2025-47694
Malicious code in fatalcardinalz3n npm...
MAL-2025-16545 Malicious code in cardinal-cors-client (npm)
The package cardinal-cors-client was found to contain malicious code...
Malicious code in cardinal-cors-client (npm)
The package cardinal-cors-client was found to contain malicious code...
Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw
Threat actors linked to the Black Basta ransomware may have exploited a recently disclosed privilege escalation flaw in the Microsoft Windows Error Reporting Service as a zero-day, according to new findings from Symantec. The security flaw in question is CVE-2024-26169 CVSS score: 7.8, an elevati...
fed.cardinalhealth.com Cross Site Scripting vulnerability OBB-3932822
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cardinalhomesatmenlopark.com Cross Site Scripting vulnerability OBB-3908605
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
fedpd.cardinalhealth.com Cross Site Scripting vulnerability OBB-3785835
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
admin.cardinalnewman.com Cross Site Scripting vulnerability OBB-3240182
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
shop.cardinalhomecenter.com Cross Site Scripting vulnerability OBB-3233214
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
admin.cardinalspellman.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1164716 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
pdtableau.cardinalhealth.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1149582 Security Researcher OakdaleHutch Helped patch 26 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting pdtableau.cardinalhealth.net website and its users...
Israeli fintech firms hit by Cardinal RAT malware
By Waqas The IT security researchers at Palo Alto Networks' Unit 42 have discovered a malware that has been targeting Israeli cyberspace especially those dealing with technology and financial sector. Dubbed Cardinal RAT remote access Trojan by researchers; the malware is currently targeting two...
Cardinal RAT Resurrected to Target FinTech Firms
A malware family called Cardinal RAT has reappeared, after two years of silence, in a series of attacks that have been targeting Israel-based financial technology firms. After Cardinal RAT was first detected in 2017, the malware disappeared for two years. But now, in this latest campaign,...
cardinal-deco.com XSS vulnerability
Open Bug Bounty ID: OBB-388746 Description| Value ---|--- Affected Website:| cardinal-deco.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
Cardinal Quest 2 - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Cardinal Quest 2 published at the 'play' market has multiple vulnerabilities...
GetSimple CMS 2.03 Path Disclosure
Vulnerability ID: HTB22730 Reference: http://www.htbridge.ch/advisory/pathdisclosureingetsimplecms.html Product: GetSimple CMS Vendor: http://get-simple.info/ http://get-simple.info/ Vulnerable Version: 2.03 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure Status: Not...
Cardinal CMS 1.2 Shell Upload
========================================================== cardinalCms 1.2 fckeditor Arbitrary File Upload Exploit. ========================================================== Date....................: 21-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software...