Lucene search
+L

17231 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/12 4:49 a.m.•18 views

Malicious code in marked-cs (npm)

This package deploys Windows gh0strat malware via VBScript --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82f49714fc5f2d734162fbcc4c7c4552ec6d6e89b81109ba8652c3d057686022 Any computer that has this package installed or running should be considered fully compromised...

6.8AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/01/10 8:11 p.m.•14 views

MAL-2025-39 Malicious code in dexscreener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 294308d3c6b462aa1ed7e43894f66f1fefe347cc188fd9a360649f1c03b0fffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/01/10 8:04 p.m.•11 views

MAL-2025-40 Malicious code in solana-stable-web-huks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29a7ad6d118f0ba506b171848b1e56b31b09fd44131fc96a3d14f41a323a5812 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/01/10 8:04 p.m.•11 views

MAL-2025-41 Malicious code in solana-transaction-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 786862cc5bb54e2a1b9307f03e4cd67b11a7325ba9c251b3695b08d8e3383c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/09 7:31 a.m.•15 views

CVE-2025-0341 CampCodes Computer Laboratory Management System edit unrestricted upload

A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this issue is some unknown functionality of the file /class/edit/edit. The manipulation of the argument ephoto leads to unrestricted upload. The attack may be...

6.5CVSS6.9AI score0.00498EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/01/09 7:31 a.m.•42 views

CVE-2025-0341 CampCodes Computer Laboratory Management System edit unrestricted upload

A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this issue is some unknown functionality of the file /class/edit/edit. The manipulation of the argument ephoto leads to unrestricted upload. The attack may be...

6.5CVSS0.00498EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/01/09 12:00 a.m.•7 views

PT-2025-3837

Name of the Vulnerable Software and Affected Versions CampCodes Computer Laboratory Management System version 1.0 Description A problem has been found in the system. It affects a part of the file /class/edit/edit. The manipulation of the s lname argument leads to cross site scripting attacks. It ...

5.4CVSS0.00389EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•17 views

CampCodes Computer Laboratory Management System: Code Injection Vulnerability

CampCodes Computer Laboratory Management System is a computer laboratory management system from CampCodes, Inc. A code injection vulnerability exists in CampCodes Computer Laboratory Management System version 1.0, which stems from the parameter slname being susceptible to cross-site scripting...

5.4CVSS4.9AI score0.00389EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•20 views

CampCodes Computer Laboratory Management System code-related vulnerabilities

CampCodes Computer Laboratory Management System is a computerized laboratory management system from CampCodes, Inc. A code issue vulnerability exists in CampCodes Computer Laboratory Management System version 1.0 due to an unrestricted upload of the parameter ephoto...

9.8CVSS6.7AI score0.00498EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•4 views

CVE-2025-0341: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this issue is some unknown functionality of the file /class/edit/edit. The manipulation of the argument ephoto leads to unrestricted upload. The attack may be...

9.8CVSS5.4AI score0.00498EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•4 views

CVE-2025-0342: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unknown part of the file /class/edit/edit. The manipulation of the argument slname leads to cross site scripting. It is possible to initiate the attack remotely...

5.4CVSS4AI score0.00389EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/08 7:15 p.m.•35 views

CVE-2024-54818

SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list...

8.8CVSS0.00528EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/01/08 7:15 p.m.•20 views

CVE-2024-54818

SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list...

8.8CVSS5.8AI score0.00528EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/08 12:00 a.m.•91 views

CVE-2024-54818

SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control through the endpoint /php-lms/admin/?page=user/list. The vulnerability allows for improper preservation of permissions, potentially granting unauthorized access to sensitive administrative functions...

8.8CVSS7.1AI score0.00528EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/08 12:00 a.m.•8 views

PT-2025-3074

Name of the Vulnerable Software and Affected Versions SourceCodester Computer Laboratory Management System version 1.0 Description The issue concerns an incorrect access control mechanism. It can be exploited via the "/php-lms/admin/?page=user/list" API endpoint. There is no information provided...

8.8CVSS0.00528EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/08 12:00 a.m.•8 views

CVE-2024-54818: Improper Preservation of Permissions

SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list...

8.8CVSS5.7AI score0.00528EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/08 12:00 a.m.•41 views

CVE-2024-54818

SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list...

0.00528EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/06 1:36 p.m.•22 views

Malicious code in tree-sitter-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbacf70d3997892f49d729cbc0db29837ec65744402a0ae0c62460813e7f254f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2025/01/06 12:15 p.m.•14 views

CVE-2024-12970

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2...

3.9CVSS5.8AI score0.01396EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/01/06 11:19 a.m.•42 views

CVE-2024-12970 OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2...

3.9CVSS0.01396EPSS
SaveExploits0References2
Rows per page
Query Builder