Lucene search
+L

17043 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/25 4:04 a.m.•8 views

Malicious code in internallib_v606 (npm)

The package internallibv606 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b6c06c560ee88f500df3ba003383f74ab623b5238ca2ac63523d552673de2bd Any computer that has this package installed or running should be considered fully...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/09/25 3:34 a.m.•3 views

Malware in igame

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/09/25 2:54 a.m.•12 views

CVE-2025-10829

A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/supedit1.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public...

9.8CVSS7.3AI score0.00421EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/09/25 12:00 a.m.•8 views

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38220)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter idd found i...

9.8CVSS7.3AI score0.00421EPSS
SaveExploits1
CNVD
CNVD
•added 2025/09/25 12:00 a.m.•16 views

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38219)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameters of the...

9.8CVSS7.3AI score0.00421EPSS
SaveExploits1
Cvelist
Cvelist
•added 2025/09/24 3:33 p.m.•42 views

CVE-2025-21476 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...

7.8CVSS0.00087EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/24 3:33 p.m.•48 views

CVE-2025-21476

CVE-2025-21476 concerns memory corruption when passing parameters to the Trusted Virtual Machine during the handshake on Qualcomm chipsets. The vulnerability is characterized by a Local attack with Low complexity, Low privileges required, no user interaction, and a high impact on Confidentiality,...

7.8CVSS6.7AI score0.00087EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/24 3:33 p.m.•11 views

CVE-2025-21476 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...

7.8CVSS6.7AI score0.00087EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/24 6:32 a.m.•6 views

MAL-2025-47520 Malicious code in isood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95552c81d5afcf7c02c3015baf503fa6c6fd1e22457eb2ac421aec6353dd50da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/23 6:47 p.m.•9 views

Malicious code in iconfont-icons (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b7bb9c2f9da72d5f2921c8a1f5f168c03307649d8ed230ea031fde029d890c0 Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/23 3:59 p.m.•15 views

Malicious code in vite-plugin-parse-json (npm)

The package vite-plugin-parse-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4013d2b27a0c8568a2b51161431838d7877caf18d55e179597d06e162989b484 Any computer that has this package installed or running should be considered full...

6.9AI score
SaveExploits0References1
NVD
NVD
•added 2025/09/23 2:15 a.m.•31 views

CVE-2025-10831

A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. The manipulation of the argument prodcode leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

9.8CVSS0.00421EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/23 1:32 a.m.•36 views

CVE-2025-10831 Campcodes Computer Sales and Inventory System pro_edit1.php sql injection

A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. The manipulation of the argument prodcode leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

7.5CVSS0.00421EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/23 1:32 a.m.•39 views

CVE-2025-10831

CVE-2025-10831 concerns Campcodes Computer Sales and Inventory System 1.0. The vulnerability targets an unknown function in the file /pages/pro_edit1.php , where manipulation of the prodcode argument enables a SQL injection . The issue is described as exploitable remotely, with the exploit disclo...

9.8CVSS6.8AI score0.00421EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/09/23 1:32 a.m.•49 views

CVE-2025-10830 Campcodes Computer Sales and Inventory System inv_edit1.php sql injection

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/invedit1.php. Executing manipulation of the argument idd can lead to sql injection. The attack can be executed remotely. The exploit has been published and may...

7.5CVSS0.00421EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/09/23 12:00 a.m.•14 views

CampCodes Computer Sales and Inventory System 安全漏洞

CampCodes Computer Sales and Inventory System is a computerized sales and inventory system from CampCodes Philippines. A security vulnerability exists in CampCodes Computer Sales and Inventory System version 1.0, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/23 12:00 a.m.•6 views

CVE-2025-10829: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/supedit1.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/23 12:00 a.m.•9 views

CVE-2025-10831: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. The manipulation of the argument prodcode leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

9.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/23 12:00 a.m.•6 views

CVE-2025-10830: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/invedit1.php. Executing manipulation of the argument idd can lead to sql injection. The attack can be executed remotely. The exploit has been published and may...

9.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/09/23 12:00 a.m.•18 views

CampCodes Computer Sales and Inventory System 安全漏洞

CampCodes Computer Sales and Inventory System is a computerized sales and inventory system from CampCodes Philippines. A security vulnerability exists in CampCodes Computer Sales and Inventory System version 1.0, which stems from the incorrect manipulation of the parameter prodcode in the file...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References5
Rows per page
Query Builder