17231 matches found
Malicious code in marked-cs (npm)
This package deploys Windows gh0strat malware via VBScript --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82f49714fc5f2d734162fbcc4c7c4552ec6d6e89b81109ba8652c3d057686022 Any computer that has this package installed or running should be considered fully compromised...
MAL-2025-39 Malicious code in dexscreener (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 294308d3c6b462aa1ed7e43894f66f1fefe347cc188fd9a360649f1c03b0fffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-40 Malicious code in solana-stable-web-huks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29a7ad6d118f0ba506b171848b1e56b31b09fd44131fc96a3d14f41a323a5812 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-41 Malicious code in solana-transaction-toolkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 786862cc5bb54e2a1b9307f03e4cd67b11a7325ba9c251b3695b08d8e3383c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-0341 CampCodes Computer Laboratory Management System edit unrestricted upload
A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this issue is some unknown functionality of the file /class/edit/edit. The manipulation of the argument ephoto leads to unrestricted upload. The attack may be...
CVE-2025-0341 CampCodes Computer Laboratory Management System edit unrestricted upload
A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this issue is some unknown functionality of the file /class/edit/edit. The manipulation of the argument ephoto leads to unrestricted upload. The attack may be...
PT-2025-3837
Name of the Vulnerable Software and Affected Versions CampCodes Computer Laboratory Management System version 1.0 Description A problem has been found in the system. It affects a part of the file /class/edit/edit. The manipulation of the s lname argument leads to cross site scripting attacks. It ...
CampCodes Computer Laboratory Management System: Code Injection Vulnerability
CampCodes Computer Laboratory Management System is a computer laboratory management system from CampCodes, Inc. A code injection vulnerability exists in CampCodes Computer Laboratory Management System version 1.0, which stems from the parameter slname being susceptible to cross-site scripting...
CampCodes Computer Laboratory Management System code-related vulnerabilities
CampCodes Computer Laboratory Management System is a computerized laboratory management system from CampCodes, Inc. A code issue vulnerability exists in CampCodes Computer Laboratory Management System version 1.0 due to an unrestricted upload of the parameter ephoto...
CVE-2025-0341: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this issue is some unknown functionality of the file /class/edit/edit. The manipulation of the argument ephoto leads to unrestricted upload. The attack may be...
CVE-2025-0342: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unknown part of the file /class/edit/edit. The manipulation of the argument slname leads to cross site scripting. It is possible to initiate the attack remotely...
CVE-2024-54818
SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list...
CVE-2024-54818
SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list...
CVE-2024-54818
SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control through the endpoint /php-lms/admin/?page=user/list. The vulnerability allows for improper preservation of permissions, potentially granting unauthorized access to sensitive administrative functions...
PT-2025-3074
Name of the Vulnerable Software and Affected Versions SourceCodester Computer Laboratory Management System version 1.0 Description The issue concerns an incorrect access control mechanism. It can be exploited via the "/php-lms/admin/?page=user/list" API endpoint. There is no information provided...
CVE-2024-54818: Improper Preservation of Permissions
SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list...
CVE-2024-54818
SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list...
Malicious code in tree-sitter-strings (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbacf70d3997892f49d729cbc0db29837ec65744402a0ae0c62460813e7f254f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-12970
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2...
CVE-2024-12970 OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2...