Malicious code in cressida-nashira-vortex-csrf (npm)

The package cressida-nashira-vortex-csrf was found to contain malicious code...

Malicious code in quito-cryovolcano-relay-csrf (npm)

The package quito-cryovolcano-relay-csrf was found to contain malicious code...

Malicious code in auth-jwt-csrf-kinetic (npm)

The package auth-jwt-csrf-kinetic was found to contain malicious code...

Malicious code in csrf-elara-hydra-bellatrix (npm)

The package csrf-elara-hydra-bellatrix was found to contain malicious code...

Malicious code in dactyl-telesto-csrf-frontend (npm)

The package dactyl-telesto-csrf-frontend was found to contain malicious code...

MAL-2025-17683 Malicious code in cressida-nashira-vortex-csrf (npm)

The package cressida-nashira-vortex-csrf was found to contain malicious code...

MAL-2025-24785 Malicious code in kryptor-csrf (npm)

The package kryptor-csrf was found to contain malicious code...

MAL-2025-17788 Malicious code in csrf-elara-hydra-bellatrix (npm)

The package csrf-elara-hydra-bellatrix was found to contain malicious code...

Malicious code in yaml-avior-sync-csrf (npm)

The package yaml-avior-sync-csrf was found to contain malicious code...

Malicious code in boson-csrf-accretion-stream (npm)

The package boson-csrf-accretion-stream was found to contain malicious code...

Malicious code in csrf-ursa-rest-carpo (npm)

The package csrf-ursa-rest-carpo was found to contain malicious code...

MAL-2025-31403 Malicious code in quito-cryovolcano-relay-csrf (npm)

The package quito-cryovolcano-relay-csrf was found to contain malicious code...

MAL-2025-32035 Malicious code in rehype-redshift-aether-csrf (npm)

The package rehype-redshift-aether-csrf was found to contain malicious code...

MAL-2025-16785 Malicious code in changelog-browserify-csrf-levels (npm)

The package changelog-browserify-csrf-levels was found to contain malicious code...

MAL-2025-15085 Malicious code in auth-jwt-csrf-kinetic (npm)

The package auth-jwt-csrf-kinetic was found to contain malicious code...

WordPress Findgo Theme <= 1.3.57 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by 0xd4rk5id3 in WordPress Theme Findgo versions = 1.3.57...

PT-2025-33379 · Unknown · Apustheme Findgo

Name of the Vulnerable Software and Affected Versions: ApusTheme Findgo versions through 1.3.57 Description: A Cross-Site Request Forgery CSRF vulnerability exists in ApusTheme Findgo, allowing attackers to perform actions on behalf of an unsuspecting user. Recommendations: Update ApusTheme Findg...

CVE-2020-9322

Statamic Core prior to 2.11.8 exposes a cross-site scripting (XSS) vulnerability via the /users endpoint. This can be exploited through CSRF to create an administrator user. Stored XSS is possible when a JavaScript payload is placed in the username during account registration, and reflected XSS c...

CVE-2025-51541

A stored cross-site scripting XSS vulnerability exists in the Shopware 6 installation interface at /recovery/install/database-configuration/. The cdatabaseschema field fails to properly sanitize user-supplied input before rendering it in the browser, allowing an attacker to inject malicious...

ROS-20250806-13

Golang programming language vulnerability is related to improper input validation. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code A vulnerability in the crypto-elliptic component of the Golang programming language is related to the...