PT-2020-21420

Name of the Vulnerable Software and Affected Versions geoheat version 1.3.2 Description The issue concerns malicious code in version 1.3.2 of geoheat. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends the extracted values to the...

PT-2020-21042

Name of the Vulnerable Software and Affected Versions angular-location-update version 0.0.3 Description The issue concerns malicious code in version 0.0.3 of angular-location-update. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends the...

PT-2020-21431

Name of the Vulnerable Software and Affected Versions scroool version 0.1.7 Description The issue concerns malicious code in version 0.1.7 of scroool that, when executed in a browser, extracts sensitive information such as password, cvc, and cardnumber fields from forms and sends this data to the...

Malicious Package in cal_rd

Version 0.1.1 of rccal contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also recommended t...

PT-2020-21441

Name of the Vulnerable Software and Affected Versions @fangrong/xoc version 1.0.6 Description The issue concerns malicious code in version 1.0.6 of @fangrong/xoc. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the...

PT-2020-21599

Name of the Vulnerable Software and Affected Versions ngx-context-menu version 0.0.26 Description The issue concerns malicious code in version 0.0.26 of ngx-context-menu. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends t...

PT-2020-20943

Name of the Vulnerable Software and Affected Versions rc cal version 0.1.1 Description The issue concerns malicious code in version 0.1.1 of rc cal. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the extracted values to...

PT-2020-21370

Name of the Vulnerable Software and Affected Versions iie-viz version 1.0.4 Description The issue concerns malicious code in version 1.0.4 of the iie-viz package. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the...

PT-2020-21289

Name of the Vulnerable Software and Affected Versions uploader-plugin version 1.0.2 Description The issue concerns malicious code in the uploader-plugin that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This extracted data...

PT-2020-21242

Name of the Vulnerable Software and Affected Versions json-serializer version 2.0.10 Description The issue concerns malicious code in version 2.0.10 of the json-serializer package. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms a...

PT-2020-21119

Name of the Vulnerable Software and Affected Versions ngx-pica version 1.1.5 Description The issue concerns malicious code in version 1.1.5 of ngx-pica. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends the extracted values to the endpoint...

PT-2020-21396

Name of the Vulnerable Software and Affected Versions libubx version 1.0.3 Description The issue concerns malicious code in version 1.0.3 of libubx. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends the extracted values to the endpoint...

PT-2020-21050

Name of the Vulnerable Software and Affected Versions device-mqtt version 1.0.11 Description The issue concerns malicious code in version 1.0.11 of the device-mqtt package. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends...

PT-2020-21124

Name of the Vulnerable Software and Affected Versions jquery-airload version 0.2.5 Description The issue concerns malicious code in version 0.2.5 of jquery-airload. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the...

PT-2020-21311

Name of the Vulnerable Software and Affected Versions leaflet-gpx version 1.0.1 Description The issue concerns malicious code in version 1.0.1 of the leaflet-gpx package. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends the extracted value...

PT-2020-21508

Name of the Vulnerable Software and Affected Versions pyramid-proportion version 1.0.5 Description The issue concerns malicious code in version 1.0.5 of the pyramid-proportion package. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from for...

PT-2020-21019

Name of the Vulnerable Software and Affected Versions slush-fullstack-framework version 0.9.2 Description The issue concerns malicious code in version 0.9.2 of the software. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and send...

PT-2020-21052

Name of the Vulnerable Software and Affected Versions radicjs version 0.2.1 Description The issue concerns malicious code in version 0.2.1 of radicjs that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This extracted data is...

PT-2020-20981

Name of the Vulnerable Software and Affected Versions zemen version 0.0.5 Description The issue concerns malicious code in version 0.0.5 of zemen that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This extracted data is the...

PT-2020-21425

Name of the Vulnerable Software and Affected Versions bmap version 1.0.3 Description The issue concerns malicious code in version 1.0.3 of the bmap module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the extracted...