Lucene search
+L

17043 matches found

Github Security Blog
Github Security Blog
•added 2025/10/02 2:28 p.m.•2 views

Malware in importlib-resources

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/10/02 2:28 p.m.•2 views

Malware in cryptonote-util

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/10/02 2:28 p.m.•2 views

Malware in pkgutil-resolve-name

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/10/02 2:28 p.m.•2 views

Malware in com.unity.device-simulator.devices

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/10/02 2:28 p.m.•3 views

Malware in com.unity.2d.spriteshape

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/10/02 2:28 p.m.•1 views

Malware in affected-tests

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/10/02 2:28 p.m.•7 views

MAL-2025-47889 Malicious code in mccabe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb690e83db7bf325ed12d03f46975f5de59a5b5756e9ce05cf5072e95cb5852c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
F5 Networks
F5 Networks
•added 2025/10/01 6:47 p.m.•23 views

K000156758: GNOME GLib vulnerability CVE-2024-34397

Security Advisory Description An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bu...

5.2CVSS6.5AI score0.00763EPSS
SaveExploits1
OSV
OSV
•added 2025/09/29 5:28 a.m.•10 views

MAL-2025-47834 Malicious code in react-repack (npm)

The package react-repack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 038fe89fdf3f2220fd47dd19c5464b9fcc0b3f60c5ad14ed468d2d1da9909de1 Any computer that has this package installed or running should be considered fully...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/09/29 5:15 a.m.•3 views

Malware in @cryptochords/shared

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/09/29 2:01 a.m.•4 views

Malware in react-lovable

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2025/09/29 12:00 a.m.•10 views

SQL Injection Vulnerability in Computer Sales and Inventory System

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within t...

9.8CVSS7.3AI score0.0044EPSS
SaveExploits1
CNVD
CNVD
•added 2025/09/29 12:00 a.m.•10 views

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38218)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of security filtering on the ID parameter in the...

9.8CVSS7.2AI score0.00495EPSS
SaveExploits1
Cvelist
Cvelist
•added 2025/09/28 3:32 p.m.•36 views

CVE-2025-11109 Campcodes Computer Sales and Inventory System us_edit.php sql injection

A vulnerability was identified in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/usedit.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is...

7.5CVSS0.00495EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•18 views

PT-2025-39777

Name of the Vulnerable Software and Affected Versions Campcodes Computer Sales and Inventory System version 1.0 Description A flaw exists in Campcodes Computer Sales and Inventory System version 1.0 that allows for remote SQL injection. The issue is located in the file /pages/us edit.php and...

9.8CVSS7.4AI score0.00495EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2025/09/28 12:00 a.m.•13 views

CampCodes Computer Sales and Inventory System SQL注入漏洞

CampCodes Computer Sales and Inventory System is a computerized sales and inventory system from CampCodes Philippines. CampCodes Computer Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00495EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•5 views

CVE-2025-11109: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/usedit.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is...

9.8CVSS5.6AI score0.00495EPSS
SaveExploits1References6
OSV
OSV
•added 2025/09/26 8:15 p.m.•18 views

CVE-2025-11039

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/usedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th...

9.8CVSS5.7AI score0.0044EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/26 8:15 p.m.•25 views

CVE-2025-11039

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/usedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th...

9.8CVSS0.0044EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/26 7:32 p.m.•35 views

CVE-2025-11039 Campcodes Computer Sales and Inventory System us_edit1.php sql injection

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/usedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th...

7.5CVSS0.0044EPSS
SaveExploits1References5
Rows per page
Query Builder