Lucene search
K

15492 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/01 10:12 a.m.4 views

Malicious code in ozstesting-pt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd890b0f1505256856827c172f048855f0dff526343f90fafb44920827544ff5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2023/05/01 10:5 a.m.11 views

MAL-2023-103 Malicious code in apitelegram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea07ce89558075f0ae14ec35b104be366b715ccc70f4308cf8a6d8ec4e193638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2023/05/01 10:5 a.m.8 views

MAL-2023-770 Malicious code in sendtelegram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 221fc847bce5ae6a3869b9caa05d9dc742b9b0dbc89cbd748577279bc801d4a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2023/05/01 3:33 a.m.9 views

MAL-2023-1168 Malicious code in editor-layer-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c27267283420f53586172a7d6b227c424aeb92e63c242a01287112a092a7247a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2023/04/27 12:0 a.m.5 views

MAL-2023-17 Malicious code in 3a-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bbd096556ffc90070942d3750f4d790cad77115f15c0e3b8aec5d6788bc817d8 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

7AI score
Exploits0References2
OSV
OSV
added 2023/04/26 5:12 a.m.7 views

MAL-2023-636 Malicious code in nodejs-encrypt-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f59ac2ca2c204c22b2a5f11db9eef454f786803297f219aeb3e179dbe656ae07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/04/25 9:52 p.m.5 views

Malicious code in nlp-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef6692095c28b968172ac45d43937a7bfe30267c7c27add946d2534ad6c7e24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2023/04/25 9:51 p.m.8 views

MAL-2023-762 Malicious code in schema2x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cb19fe5d19843c87b53b0b52539cc74f919d82a31151b81159b41bd40b1467a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2023/04/25 9:46 p.m.10 views

MAL-2023-763 Malicious code in schema2x-annotations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14cc8a264046041e2d275a0a2e465eb74b50c5ff3824a6330b7253196e8b6fc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2023/04/25 9:44 p.m.5 views

MAL-2023-486 Malicious code in grunt-heremaps-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebaf028ac6b37df270050931b5b8f28eccfbfc7f8d88bd84ca5a52919e604bc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/04/24 5:20 a.m.4 views

Malicious code in coinsbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24df958f45174789a669d2bd93abb0ba014c2f3b2ba7a3f6604cd662bd31f0b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2023/04/24 5:20 a.m.9 views

MAL-2023-1007 Malicious code in zebilamouche (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e40ab7411da6bec58baf070991f0cfc47b4d1b87ba7bdf784b31aa130a118d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Cvelist
Cvelist
added 2023/04/22 4:0 p.m.26 views

CVE-2023-2242 SourceCodester Online Computer and Laptop Store GET Parameter sql injection

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation of the argument c/s leads to sql injection. The attack can be...

6.5CVSS9.2AI score0.00729EPSS
Exploits1References3
CVE
CVE
added 2023/04/22 4:0 p.m.45 views

CVE-2023-2242

The CVE-2023-2242 entry concerns SourceCodester Online Computer and Laptop Store 1.0. The vulnerability affects the GET Parameter Handler, where manipulation of the c/s parameter leads to SQL injection. It is a remotely exploitable issue and, per the CVE description, the exploit has been disclose...

8.8CVSS7.8AI score0.00729EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/22 12:0 a.m.4 views

PT-2023-18486 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the component GET Parameter Handler, where the manipulation of the c/s argument leads to sql injection. This issue can be exploited...

8.8CVSS6.8AI score0.00729EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/04/22 12:0 a.m.3 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from a problem with the component GET Parameter Handler, where manipulation...

8.8CVSS7AI score0.00729EPSS
Exploits1References5
OSV
OSV
added 2023/04/21 3:34 a.m.10 views

MAL-2023-36 Malicious code in @esmpfrontend/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2edaa6244ce4a0413da9f30fb0702f0e5ddd8dfd4d35ae03f9de1f4a815061d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/04/20 4:50 p.m.6 views

Malicious code in neat_clean (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1afebf6a78e549208f1afb7e628144ad3ea178a57f5062542af37c5816330b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2023/04/20 4:50 p.m.5 views

MAL-2023-617 Malicious code in neat_clean (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1afebf6a78e549208f1afb7e628144ad3ea178a57f5062542af37c5816330b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2023/04/20 4:32 p.m.7 views

MAL-2023-748 Malicious code in rocketship-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce0aafeff45db86efda9196a3fd7a50259dcc329c7c1a74dc4e624fde4730830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Rows per page
Query Builder