355 matches found
EUVD-2025-175786
Malicious code in upsilon-catch-new-epsilon-unix npm...
EUVD-2025-179844
Malicious code in catch-daemon-mock-emulate-validate npm...
EUVD-2025-176211
Malicious code in static-view-warn-cluster-catch npm...
EUVD-2025-175868
Malicious code in try-alert-hash-catch-index npm...
EUVD-2025-175662
Malicious code in warn-pi-visualize-catch-slow npm...
EUVD-2025-176643
Malicious code in rho-mu-catch-double-cloud npm...
Malicious code in catch-stack-load-public-grep (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c509a0b517637027dd9226985a76750f86dedd7bb0dcfaf6449347750210a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179162
Malicious code in emulate-catch-file-mu-parse npm...
EUVD-2025-178938
Malicious code in fast-catch-notify-epsilon-new npm...
EUVD-2025-177829
Malicious code in minify-mu-catch-authenticate-user npm...
EUVD-2025-175947
Malicious code in throw-omega-catch-hot-sanitize npm...
CVE-2025-50735
Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...
EUVD-2025-37512
Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...
CVE-2025-50735
Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...
CVE-2025-50735
Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...
CVE-2025-60041
Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through = 3.5.3...
EUVD-2025-35427
Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through = 3.5.3...
CVE-2025-60041
Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through = 3.5.3...
CVE-2025-60041 WordPress Emails Catch All plugin <= 3.5.3 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through = 3.5.3...
