Malicious Package

Overview vor-test-project-npm-please-ignore-1 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

Malicious Package

Overview klook-tetris-server is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was uncovered by o...

CVE-2022-2130

creationtimestamp| type| source ---|---|--- 2022-06-20 12:26:18+00:00| seen| https://t.me/cibsecurity/44811 2024-11-27 11:46:27+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2130.yaml...

CVE-2019-17671

creationtimestamp| type| source ---|---|--- 2022-06-18 10:22:36+00:00| published-proof-of-concept| https://t.me/arm1tage/129 2024-01-16 10:36:22+00:00| seen| https://t.me/ctinow/168734 2025-12-04 01:12:40+00:00| confirmed|...

CVE-2021-42887

creationtimestamp| type| source ---|---|--- 2022-06-03 16:26:30+00:00| seen| https://t.me/cibsecurity/43814 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-42887.yaml...

PT-2022-13: Stored Cross-Site Scripting (Stored XSS) in ZoneMinder

The vulnerability was identified in ZoneMinder versions up to 1.36.14. The «Stored XSS» vulnerability allows a remote attacker to perform cross-site scripting XSS attacks. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 27.05.2022 Recommendations: Update to version...

CVE-2022-1711

creationtimestamp| type| source ---|---|--- 2022-05-17 16:27:24+00:00| seen| https://t.me/cibsecurity/42803 2025-05-01 10:53:42+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-1711.yaml 2025-05-02 21:02:23+00:00| seen|...

CVE-2022-0873

creationtimestamp| type| source ---|---|--- 2022-05-16 18:26:27+00:00| seen| https://t.me/cibsecurity/42735 2025-12-22 11:21:44+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-0873.yaml 2025-12-23 21:02:58+00:00| seen|...

CVE-2021-42192

creationtimestamp| type| source ---|---|--- 2022-05-04 14:34:49+00:00| seen| https://t.me/cibsecurity/41891 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-42192.yaml...

CVE-2022-0783

creationtimestamp| type| source ---|---|--- 2022-05-02 20:27:59+00:00| seen| https://t.me/cibsecurity/41734 2025-05-28 08:04:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-0783.yaml...

CVE-2022-28508

creationtimestamp| type| source ---|---|--- 2022-04-30 03:26:47+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2067 2022-04-30 17:55:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5909 2025-04-24 13:45:33+00:00| confirmed|...

CVE-2022-25226

creationtimestamp| type| source ---|---|--- 2022-04-18 20:29:32+00:00| seen| https://t.me/cibsecurity/41035 2025-02-11 16:54:10+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-25226.yaml 2025-02-12 21:02:00+00:00| seen|...

jiameilight.com Cross Site Scripting vulnerability OBB-2511152

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-31805

creationtimestamp| type| source ---|---|--- 2022-04-13 21:36:47+00:00| seen| https://t.me/ctinow/50238 2022-04-14 16:45:03+00:00| exploited| https://t.me/truesecator/2850 2022-04-15 11:33:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1954 2023-04-27 09:58:59+00:00| confirmed|...

ilwol.co.kr Cross Site Scripting vulnerability OBB-2503276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-24819

creationtimestamp| type| source ---|---|--- 2022-04-09 00:13:20+00:00| seen| https://t.me/cibsecurity/40410 2024-12-02 05:04:53+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-24819.yaml...

CVE-2021-46419

creationtimestamp| type| source ---|---|--- 2022-04-07 16:49:36+00:00| seen| https://t.me/cibsecurity/40294 2024-04-03 12:44:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-46419.yaml 2024-04-06 19:02:11+00:00| published-proof-of-concept...

CVE-2021-44138

creationtimestamp| type| source ---|---|--- 2022-04-04 16:27:40+00:00| seen| https://t.me/cibsecurity/40096 2023-06-09 02:03:36+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-44138.yaml...

PT-2022-10: Local Authentication Restriction Bypass in HPE OneView

The vulnerability was identified in HPE OneView versions before 6.6. The discovered vulnerability allows an attaker to bypass local authentication restriction. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 29.03.2022 Recommendations: Update to version 6.6 Additional...

CVE-2021-43725

creationtimestamp| type| source ---|---|--- 2022-03-28 16:39:17+00:00| seen| https://t.me/cibsecurity/39644 2023-06-05 12:33:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-43725.yaml...