51372 matches found
Ofensive-security
This repository contains my Offensive Cyber Security / Penetrati...
Ntopng Authentication Bypass
Ntopng, a passive network monitoring tool, contains an authentication bypass vulnerability in ntopng = 4.2 id: CVE-2021-28073 info: name: Ntopng Authentication Bypass author: z3bd severity: critical description: Ntopng, a passive network monitoring tool, contains an authentication bypass...
Malicious code in zappr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1d1ba299d9e9b09804199d01b8da2e7f28c9305d8880ed49177a01e9d094f3 The package zappr was found to contain malicious code. Source: ghsa-malware c770ad9e96af96c9a3d81bf160dcb48c4d3b4e16e5dc6e717e7161d8e3ab420f Any...
Malicious code in z-shop-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac6f0b86a348586f517ef591a8fa3dd2ffffd919bcc1f6cfce912d06cba4aa5 The package z-shop-ui was found to contain malicious code. Source: ghsa-malware 7d3e42fd3ceecf78bbc9a794a0a36c38485ab8e91fe9892ffbd9c1db7f2a0fa0 Any...
MAL-2026-730 Malicious code in zappr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1d1ba299d9e9b09804199d01b8da2e7f28c9305d8880ed49177a01e9d094f3 The package zappr was found to contain malicious code. Source: ghsa-malware c770ad9e96af96c9a3d81bf160dcb48c4d3b4e16e5dc6e717e7161d8e3ab420f Any...
MAL-2026-728 Malicious code in z-shop-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac6f0b86a348586f517ef591a8fa3dd2ffffd919bcc1f6cfce912d06cba4aa5 The package z-shop-ui was found to contain malicious code. Source: ghsa-malware 7d3e42fd3ceecf78bbc9a794a0a36c38485ab8e91fe9892ffbd9c1db7f2a0fa0 Any...
Malicious code in chai-async-promised (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b03e745920fbf2f3b25c5f9bcd2cd6814de348ff5ae3a0c5d8832f2494b2770 The package chai-async-promised was found to contain malicious code. Source: ghsa-malware...
Malicious code in dotenv-embedded (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a4c23212d813ad58db347e1a5a152b003e1085b18036f047755d05de52fe0b The package dotenv-embedded was found to contain malicious code. Source: ghsa-malware bf0cfff747361e3a51fbd35f3018e05312b4bd030890362b89821789ab2adb5...
Malicious code in @fxinternal/netdiagnostics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2484371522051117d2994af8795b9caef31467aaa40edfacfc8d80a45fd820 The package @fxinternal/netdiagnostics was found to contain malicious code. Source: ghsa-malware...
Malicious code in rreact-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545745c49f65687bb4f76d176081253cf22e6a0400a6ef46167d730b2c6bc5af The package rreact-sdk was found to contain malicious code. Source: ghsa-malware 20062321714f0ca22d7f2eb77967ff272ade6afac544812eaeacd15b918dbc11 Any...
MAL-2026-714 Malicious code in reactt-sdkk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1040004e57d22b532a81d886c4a8d7847ea79a24950a31bc092da3f8ff0e46b The package reactt-sdkk was found to contain malicious code. Source: ghsa-malware 56b1676235be8d72d317cee06957d2c7c8b4a3e8fd215927e13b76fdcfe44384 An...
Malicious code in react-sdkk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5be5e5cc941dec9a36d78d9de45e31cd604e0efacd37d1b78b62e452689b2cb7 The package react-sdkk was found to contain malicious code. Source: ghsa-malware 60e38e54e0f061a0da679900787b26c8949e350345b5ae5e12688321574bd4c7 Any...
MAL-2026-712 Malicious code in ongose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1779f3d5601055650bab2b59f56ba51bc92366ccd49d815010ef67839f1257 The package ongose was found to contain malicious code. Source: ghsa-malware da279e18ef68f92cc1f02d94f9be7149d4664988f627ff7efbfcda617a237761 Any...
MAL-2026-711 Malicious code in mongoose_update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91df51d75c82831870e737a45d083f0f75a4efd3fa5446b0c07a5c8c9ad910fd The package mongooseupdate was found to contain malicious code. Source: ghsa-malware c8c705834895c7083b2f00f874d9761f360f0208ee61aaeec6af5c2a806841e5...
Malicious code in mongooose_updated (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f397bd93c8a607a5fb7cb6c4da24be0ed65157020f40d778f66f4bb8f0c6237b The package mongoooseupdated was found to contain malicious code. Source: ghsa-malware c02f092aac581da5247eba7163d5bcbb065ed41865e8eeb464ea1fedd8a4d6...
MAL-2026-710 Malicious code in mongooose_updated (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f397bd93c8a607a5fb7cb6c4da24be0ed65157020f40d778f66f4bb8f0c6237b The package mongoooseupdated was found to contain malicious code. Source: ghsa-malware c02f092aac581da5247eba7163d5bcbb065ed41865e8eeb464ea1fedd8a4d6...
CVE-2025-65923
A Stored Cross-Site Scripting XSS vulnerability was discovered within the CSV import mechanism of ERPNext thru 15.88.1 when using the Update Existing Recordsoption. An attacker can embed malicious JavaScript code into a CSV field, which is then stored in the database and executed whenever the...
VulnCheck KEV: CVE-2025-14975
The Custom Login Page Customizer WordPress plugin before 2.5.4 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by knowing their username, such as administrator ones, and therefore gain access to their account...
EUVD-2020-30995
webTareas 2.0.p8 contains a file deletion vulnerability in the printlayout.php administration component that allows authenticated attackers to delete arbitrary files. Attackers can exploit the vulnerability by manipulating the 'atttmp1' parameter to specify and delete files on the server through ...
FUXA allows Remote Code Execution (RCE) via the project import functionality.
FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...