Lucene search
+L

27 matches found

OSV
OSV
•added 2025/06/15 2:37 p.m.•10 views

MAL-2025-5069 Malicious code in zora-config-loader (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90bb43834ca3c2d8ed358c803284c55ac5cbc2a41e43dca36415cde5e63907fa Any computer that has this package installed or running should be considered...

7AI score
SaveExploits0References1
PyPA
PyPA
•added 2020/05/22 5:15 p.m.•11 views

PYSEC-2020-341

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

9.8CVSS7.5AI score0.04533EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
•added 2017/07/14 12:00 a.m.•11 views

IdeaCMS microstore config_loader.asp has SQL injection vulnerability

IdeaCMS Micro Mall Management System is a PC+Mobile+WeChat integrated mall system developed by Sampi Network Technology Co. A SQL injection vulnerability exists in IdeaCMS Micro Mall configloader.asp. An attacker can exploit this vulnerability to obtain sensitive information from the database...

7.6AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•17 views

Puzzle Apps CMS 3.2 - Local File Inclusion

No description provided by source. ------------------------------------------------------------------------ Software................ Puzzle Apps CMS 3.2 Vulnerability........... Local File Inclusion Site.................... http://www.puzzleapps.org/ Download Link...

7.1AI score
SaveExploits0
CVE
CVE
•added 2014/03/14 4:00 p.m.•79 views

CVE-2013-2086

The CVE-2013-2086 issue affects ownCloud 5.0.x prior to 5.0.6, where the configuration loader writes CSRF tokens (and other private data) into an accessible JavaScript file. This leakage enables remote attackers to obtain CSRF tokens and other sensitive information, per the official advisory and ...

5CVSS6.2AI score0.01799EPSS
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
•added 2011/05/30 12:00 a.m.•30 views

Puzzle Apps CMS 3.2 Local File Inclusion

------------------------------------------------------------------------ Software................ Puzzle Apps CMS 3.2 Vulnerability........... Local File Inclusion Site.................... http://www.puzzleapps.org/ Download Link...

0.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2011/05/29 12:00 a.m.•24 views

Puzzle Apps CMS 3.2 - Local File Inclusion

Puzzle Apps CMS 3.2 - Local File Inclusion ------------------------------------------------------------------------ Software................ Puzzle Apps CMS 3.2 Vulnerability........... Local File Inclusion Site.................... http://www.puzzleapps.org/ Download Link...

0.1AI score
SaveExploits0
Rows per page
Query Builder