Lucene search
+L

18956 matches found

Github Security Blog
Github Security Blog
•added 2025/04/29 6:04 a.m.•8 views

Malware in nsemea-purchaseorder-lib-poc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/29 12:00 a.m.•12 views

CVE-2025-45956: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in managedamage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter...

8.8CVSS6.6AI score0.00496EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/04/29 12:00 a.m.•17 views

CVE-2025-45956

A SQL injection vulnerability in managedamage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter...

6.6AI score0.00496EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/29 12:00 a.m.•30 views

PT-2025-18191 · Sourcecodester · Sourcecodester Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Computer Laboratory Management System version 1.0 Description: A SQL injection issue in the manage damage.php file allows an authenticated attacker to execute arbitrary SQL commands via the id parameter. This enables the attack...

8.8CVSS6.5AI score0.00496EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/04/29 12:00 a.m.•56 views

CVE-2025-45956

A SQL injection vulnerability in managedamage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter...

0.00496EPSS
SaveExploits1References1
CVE
CVE
•added 2025/04/29 12:00 a.m.•115 views

CVE-2025-45956

The Sourcecodester Computer Laboratory Management System v1.0 is vulnerable to a SQL injection flaw in the manage_damage.php file. An authenticated attacker can exploit the **

8.8CVSS6.6AI score0.00496EPSS
SaveExploits1References1Affected Software1
osv_mal
osv_mal
•added 2025/04/28 6:55 p.m.•23 views

MAL-2025-3495 Malicious code in husky-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b01a82774c925f898dadeaf8b27ddb3aa194a11d46fbc9822c04427de0c99f71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/28 6:55 p.m.•11 views

Malicious code in husky-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b01a82774c925f898dadeaf8b27ddb3aa194a11d46fbc9822c04427de0c99f71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2025/04/28 6:36 a.m.•11 views

MAL-2025-3490 Malicious code in fc-online (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a64a01d4995610a37c1690ecaecc64be60f68c266b77ef1c80acceeb303ac71c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/04/28 6:26 a.m.•4 views

Malware in needlecast_b9s_jewel_fyc_fe_client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2025/04/28 6:26 a.m.•12 views

MAL-2025-3501 Malicious code in needlecast_mvd_ads_site_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ce65a4d7678f6d84073ddd091e870fc620022fdb560eeec0138823d6ac0b74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/04/28 6:26 a.m.•5 views

Malware in needlecast_mvd_ads_site_client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/28 6:22 a.m.•13 views

Malicious code in cerberus-management-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a81dea17b012ce7621aca36c310cec6946eda16345c910c4537a673db19c794 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/04/28 6:22 a.m.•6 views

Malware in gcp-alert-service

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2025/04/28 6:22 a.m.•13 views

MAL-2025-3493 Malicious code in green-giant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5124a99877f0c6c7c80799d23850b5b5c3f7f308ecdbfcfba13300c69a3fd72a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2025/04/28 6:22 a.m.•15 views

MAL-2025-3487 Malicious code in cerberus-management-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a81dea17b012ce7621aca36c310cec6946eda16345c910c4537a673db19c794 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2025/04/28 6:22 a.m.•12 views

MAL-2025-3492 Malicious code in graphhopper-js-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 528454d3ceaec479832ef3607c05e7f1a1f58026c1a94fcfb2b3835b952d9c2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2025/04/28 6:22 a.m.•25 views

MAL-2025-3506 Malicious code in vonage-status-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ada0aade725df8ff1808b4600aaf892c84da40d29ad87d0488895e3894712c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/04/28 5:29 a.m.•4 views

Malware in @zener-soft-consulting/ab-webcomponents-library

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/28 5:27 a.m.•8 views

Malicious code in myexampledoges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f73cffbd113f766f9b5e4d0a68d2aa94c67ed0b3521da15d8afab243bdf9e24f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder