Malicious code in hurt-aquamarine-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d639ab780f7d703fa2d1acae8ca34701ced21d79f8997e8f70239b771c3863c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-naget14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5842bd4c0b94889e4d9d5828769e49a13b6f4fb13ae1a4738b0e1458378a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-lapis6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6550c6acadd642ca3e6aeb276c5438a4fe223fe333d934dce55bf645951b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Rollbar.js 安全漏洞

Rollbar.js is a bug tracking and logging library from Rollbar open source. A security vulnerability exists in Rollbar.js versions prior to 2.26.5 and versions prior to 3.0.0-alpha1 through 3.0.0-beta5, which stems from a prototype contamination in the merge function that could lead to malicious...

WordPress plugin WP Go Maps 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

SvelteKit 安全漏洞

SvelteKit is a set of Svelte open source web development framework. A security vulnerability exists in SvelteKit 2.27.3 and earlier versions, which stems from prototype contamination in the parseFormData function in formData.js, which could lead to a denial of service, type obfuscation, and...

PromptLocate: Localizing Prompt Injection Attacks

Prompt injection attacks deceive a large language model into completing an attacker-specified task instead of its intended task by contaminating its input data with an injected prompt, which consists of injected instructions and data. Localizing the injected prompt within contaminated data is...

EUVD-2012-2943

Malware in sbrugna...

EUVD-2020-11155

Malware in sbrugna...

Flag Forge 访问控制错误漏洞

Flag Forge is an easy-to-use CTF platform open-sourced by FlagForge. An access control error vulnerability exists in Flag Forge versions 2.0.0 through prior to 2.3.2, which stems from a lack of authentication and authorization checks in the /api/admin/badge-templates and...

Pilot Contamination Attacks Detection with Machine Learning for Multi-User Massive MIMO

Massive multiple-input multiple-output MMIMO is essential to modern wireless communication systems, like 5G and 6G, but it is vulnerable to active eavesdropping attacks. One type of such attack is the pilot contamination attack PCA, where a malicious user copies pilot signals from an authentic us...

EUVD-2024-42518

Malicious code in bioql PyPI...

EUVD-2024-1647

Malicious code in bioql PyPI...

EUVD-2024-1029

Malicious code in bioql PyPI...

LibreChat 安全漏洞

LibreChat is an enhanced ChatGPT clone by Danny Avila Personal Developer. A security vulnerability exists in LibreChat that stems from a lack of proper filtering when automatically binding user-supplied data to internal object properties or database fields, which could lead to manipulation and...

algoliasearch-helper 安全漏洞

algoliasearch-helper is an open source JavaScript module from Algolia that helps you keep track of search parameters and provides a higher level API. A security vulnerability exists in algoliasearch-helper version 2.0.0-rc1 through versions prior to 3.11.2, which stems from prototype contaminatio...

apidoc-core 安全漏洞

apidoc-core is an open source parser library from apiDoc. A security vulnerability exists in apidoc-core 0.15.0 and earlier versions, which stems from prototype contamination in the preProcess function, which allows an attacker to inject attributes via a specially crafted payload, potentially...

dref 安全漏洞

dref is a DNS rebinding exploit framework open-sourced by F-Secure LABS. A security vulnerability exists in dref version 0.1.2, which stems from prototype contamination in the lib.set function and could lead to a denial-of-service attack...

Counterpart 安全漏洞

Counterpart is a translation library by the individual developer Martin Andert. A security vulnerability exists in Counterpart versions prior to 0.18.6, which stems from insufficient cleaning of user input and could lead to a prototype contamination attack...

Regularjs 安全漏洞

Regularjs is a js library for creating data-driven components from the regularjs open source. A security vulnerability exists in Regularjs version 0.2.0 and earlier, which stems from a prototype contamination in the mp.addEventHandler function that could lead to a denial of service attack...