Lucene search
K

6 matches found

OSV
OSV
added 2026/01/21 4:39 a.m.3 views

MAL-2026-412 Malicious code in connect-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7310f112bc55acc6b996816b40e9571269b53fa24468f9cd4766f3de0175a7f The package connect-web was found to contain malicious code. Source: ghsa-malware cd2c2fd9ae7a1a5387c2635150ed900d7dea7294e29dc1df20b9ccf00b7888ed An...

5.5AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/21 4:39 a.m.4 views

Malicious code in connect-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7310f112bc55acc6b996816b40e9571269b53fa24468f9cd4766f3de0175a7f The package connect-web was found to contain malicious code. Source: ghsa-malware cd2c2fd9ae7a1a5387c2635150ed900d7dea7294e29dc1df20b9ccf00b7888ed An...

5.5AI score
Exploits0References1
Snyk
Snyk
added 2026/01/21 4:39 a.m.3 views

Malicious Package

Overview connect-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS5.5AI score
Exploits0References2
EUVD
EUVD
added 2026/01/21 4:39 a.m.2 views

EUVD-2026-3735

Malicious code in connect-web npm...

5.5AI score
Exploits0References1
Snyk
Snyk
added 2025/09/22 9:9 p.m.1 views

Cross-site Scripting (XSS)

Overview @meshconnect/web-link-sdk is an A client-side JS library for integrating with Mesh Connect Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createLink.openLink function. An attacker can execute arbitrary JavaScript code in the context of the parent pag...

8.2CVSS5.3AI score0.00054EPSS
Exploits0References2
Vulnerability Lab
Vulnerability Lab
added 2015/07/02 12:0 a.m.33 views

Ebay Inc Magento Bug Bounty #16 - CSRF Web Vulnerability

Document Title: =============== Ebay Inc Magento Bug Bounty 16 - CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1472 Ebay Inc Security ID: EIBBP-31808 Release Date: ============= 2015-07-02 Vulnerability Laboratory ID VL-ID:...

7.4AI score
Exploits0
Rows per page
Query Builder