CVE-2026-4836

CVE-2026-4836 affects code-projects Accounting System 1.0. The vulnerability lies in the delete.php handling of the cos_id parameter, enabling SQL injection. Exploitation is possible remotely and exploitation is demonstrated as a Proof-of-Concept in the references. The CVSS metrics indicate a MED...

PT-2026-28190

A vulnerability was detected in code-projects Accounting System 1.0. The affected element is an unknown function of the file /my account/delete.php. Performing a manipulation of the argument cos id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

CVE-2023-29433

Missing Authorization vulnerability in 腾讯云 tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentcloud-cos: from n/a through 1.0.7...

Malicious Package

Overview cos-js-sdk-v6 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in cos-js-sdk-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d4e667425231cedc1d2417e80767126bd48fa3afc7cc2bbb14ef6ae45df684 The package cos-js-sdk-v6 was found to contain malicious code. Source: ghsa-malware 8c001845c7ca3a227b7e24858fde28811305d6f37bbf10d84f0fa5276c1d146c...

EUVD-2025-203045

Malicious code in cos-js-sdk-v6 npm...

MAL-2025-192557 Malicious code in cos-js-sdk-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d4e667425231cedc1d2417e80767126bd48fa3afc7cc2bbb14ef6ae45df684 The package cos-js-sdk-v6 was found to contain malicious code. Source: ghsa-malware 8c001845c7ca3a227b7e24858fde28811305d6f37bbf10d84f0fa5276c1d146c...

EUVD-2022-15752

Malicious code in bioql PyPI...

EUVD-2024-28303

Malicious code in bioql PyPI...

EUVD-2023-33002

Malicious code in bioql PyPI...

Malicious code in mtfe_cos_deploy (npm)

The package mtfecosdeploy was found to contain malicious code...

Malicious code in mtfe_cos-ui (npm)

The package mtfecos-ui was found to contain malicious code...

MAL-2025-26852 Malicious code in mtfe_cos_config (npm)

The package mtfecosconfig was found to contain malicious code...

MAL-2025-26850 Malicious code in mtfe_cos-core (npm)

The package mtfecos-core was found to contain malicious code...

Security Bulletin: XSS vulnerability affects IBM Cloud Object Storage System (CVE-2021-39014)

Summary XSS vulnerability affects IBM Cloud Object Storage System CVE-2021-39014. This vulnerability has been addressed in the latest ClevOS releases. Vulnerability Details CVEID:CVE-2021-39014 DESCRIPTION: IBM Cloud Object System is vulnerable to stored cross-site scripting. This vulnerability...

Security Bulletin: IBM App Connect Enterprise Certified Container Dashboards that use COS S3 storage are vulnerable to denial of service and security restrictions bypass [CVE-2024-48948] [CVE-2024-48949]

Summary Node.js module elliptic is used by IBM App Connect Enterprise Certified Container for signature validation. IBM App Connect Enterprise Certified Container Dashboard operands that use COS S3 storage are vulnerable to denial of service and security restrictions bypass. This bulletin provide...

CVE-2023-29433

Missing Authorization vulnerability in carsonxu tencentcloud-cos tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentcloud-cos: from n/a through = 1.0.7...

CVE-2023-29433

Missing Authorization vulnerability in 腾讯云 tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentcloud-cos: from n/a through 1.0.7...

CVE-2023-29433 WordPress tencentcloud-cos plugin <= 1.0.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in carsonxu tencentcloud-cos tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentcloud-cos: from n/a through = 1.0.7...

CVE-2023-29433 WordPress tencentcloud-cos plugin <= 1.0.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in 腾讯云 tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentcloud-cos: from n/a through 1.0.7...