Lucene search
+L

18956 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/14 1:02 a.m.•34 views

Malicious code in smooch-api-quickstart-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd19289d32dba6cc486601e216fa686c7ee52df61d81e7d085c91587d03fd007 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/07/14 12:57 a.m.•20 views

MAL-2023-99 Malicious code in anjelo-developer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db6f3678cbdc2b664e7533d410d364044f705af68acc098598e0ea1e993c5876 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/14 12:57 a.m.•8 views

Malicious code in anjelo-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30de88230ce0ff3f6fe0eedbd58411d187242209563a96498e787b4f79dfc7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/07/14 12:57 a.m.•22 views

MAL-2023-385 Malicious code in fca-chand (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7af03b2a119d8eb7ca4a3cff46b7d0cb89e8f3393071411044aec8320b19740b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/07/14 12:57 a.m.•17 views

MAL-2023-381 Malicious code in fca-anjelov5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eba1b88950fffb7a31b0198d26986dd299eec7409c8fa228081e1b9a62ea031e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/07/14 12:57 a.m.•13 views

MAL-2023-407 Malicious code in fca-jelongz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b28d1e340956be0c08d438e22798f34bf924f9da15d5e03ce1d8baefd0bb021 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/07/14 12:57 a.m.•9 views

MAL-2023-402 Malicious code in fca-itadori (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df106db3a560eacff2bd60a5212b08b53adce6e3763e9a554f09ed0c3c896e71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/14 12:57 a.m.•7 views

Malicious code in fca-anjelocyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72b538eb3ca50febd185d5eda1dc4a20a1e71a7d85ceea735f724a0bacab09db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/07/14 12:57 a.m.•18 views

MAL-2023-97 Malicious code in anjelo-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30de88230ce0ff3f6fe0eedbd58411d187242209563a96498e787b4f79dfc7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/07/14 12:57 a.m.•21 views

MAL-2023-98 Malicious code in anjelo-dev2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bec068f3e56304c48c4c48eecfb4eb7fd2c133a59aee2adf16f1fef8d870e18e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/07/14 12:54 a.m.•20 views

MAL-2023-40 Malicious code in @leesiwoo/fca-horizon-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8dec25cc111a5b3b0146bc3b1436ce0a77fed1c784460a1be82ace48ed2ab4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/07/14 12:54 a.m.•4 views

Malware in @leesiwoo/fca-horizon-remake

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/13 12:00 a.m.•7 views

CVE-2023-31704: Incorrect Authorization

Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role...

9.8CVSS8.4AI score0.01312EPSS
SaveExploits1References2
CVE
CVE
•added 2023/07/13 12:00 a.m.•78 views

CVE-2023-31704

The CVE-2023-31704 entry concerns Sourcecodester Online Computer and Laptop Store 1.0, which suffers from Incorrect Access Control that enables remote attackers to elevate privileges to the administrator’s role. The Red Hat/NVD-derived collateral confirms the affected product and impact (privileg...

9.8CVSS8.3AI score0.01312EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/07/13 12:00 a.m.•25 views

PT-2023-23424 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Computer and Laptop Store version 1.0 Description: The issue allows remote attackers to elevate privileges to the administrator's role due to Incorrect Access Control. Recommendations: For Sourcecodester Online Computer...

9.8CVSS8.4AI score0.01312EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/07/13 12:00 a.m.•21 views

Online Computer and Laptop Store security vulnerabilities

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of Sourcecodester Online Computer and Laptop Store, which stems from vulnerability to a false access control attack that allows a remote...

9.8CVSS8.4AI score0.01312EPSS
SaveExploits1References3
osv_mal
osv_mal
•added 2023/07/12 4:11 a.m.•14 views

MAL-2023-897 Malicious code in tools-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30da78dfec11e1d381c43bdd8a43c45655acd9e01594fe5a1285e6b42d51b030 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/12 4:11 a.m.•11 views

Malicious code in tools-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30da78dfec11e1d381c43bdd8a43c45655acd9e01594fe5a1285e6b42d51b030 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/07/12 4:10 a.m.•19 views

MAL-2023-415 Malicious code in fca-nemg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e557473b8c1ff6f8b5b9c217b6f2443903cc2ba472e895283488dfcc50a27e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/12 12:48 a.m.•6 views

Malicious code in fca-sasuke (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c44b34dea13379d08b83677880882b4e10ce40af22770d19543f624e607d4e19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder