EUVD-2025-30184

Malicious code in bioql PyPI...

Malware in @cnx-ui/cnx-ui-core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @cnx-ui/cnx-ui-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87e84454809b6a23abcd234d62b4b3630bd69cf9c89b02f5e5f8c16204712981 Any computer that has this package installed or running should be considered...

MAL-2025-47232 Malicious code in @cnx-ui/cnx-ui-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87e84454809b6a23abcd234d62b4b3630bd69cf9c89b02f5e5f8c16204712981 Any computer that has this package installed or running should be considered...

PT-2024-17320

Name of the Vulnerable Software and Affected Versions Connatix Video Embed plugin for WordPress versions up to, and including, 1.0.5 Description The Connatix Video Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cnx script code' shortcode due to...

Integer overflow

The mintToken function of a smart contract implementation for Crowdnext CNX, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13744

The CVE-2018-13744 entry concerns Crowdnext (CNX) Ethereum token smart contract MintToken function with an integer overflow, enabling the contract owner to set any user’s balance to an arbitrary value. The NVD/NVD-derived records confirm the vulnerability is a numeric overflow in MintToken; repor...

CVE-2018-13228

The CVE-2018-13228 entry concerns Crowdnext (CNX), a token on Ethereum. The documented vulnerability is an integer overflow in the sell function of CNX’s smart contract, where the calculation amount * sellPrice can evaluate to zero, enabling an attacker to diminish a seller’s assets. This is tied...

PT-2018-11710

Name of the Vulnerable Software and Affected Versions Crowdnext CNX affected versions not specified Description The issue concerns an integer overflow in the sell function of a smart contract implementation. Specifically, when amount sellPrice equals zero, it can lead to a reduction in a seller's...

CVE-2018-13228: Integer Overflow or Wraparound

The sell function of a smart contract implementation for Crowdnext CNX, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...