Lucene search
+L

3 matches found

OSV
OSV
•added 2026/08/08 12:45 a.m.•15 views

MAL-2026-13648 Malicious code in sme-rko-finance-front-operations-special-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7bfbc55631ce8b054b20444bf1e335244c998fcf00d1709f951b1afa4cb242 On require of the package, index.js loads support.js which downloads a platform-specific binary from string-concatenated cloudflare workers.dev...

5.4AI score
SaveExploits0References1
OSV
OSV
•added 2023/07/25 1:53 p.m.•64 views

GHSA-VF78-3Q9F-92G3 Hard-coded System User Credentials in Folio Data Export Spring module

Impact The module creates a system user that is used to perform internal module-to-module operations. Credentials for this user are hard-coded in the source code. This makes it trivial to authenticate as this user, resulting in unauthorized access to potentially dangerous APIs, allowing to view a...

10CVSS8.7AI score0.00652EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2023/07/25 1:53 p.m.•2491 views

Hard-coded System User Credentials in Folio Data Export Spring module

Impact The module creates a system user that is used to perform internal module-to-module operations. Credentials for this user are hard-coded in the source code. This makes it trivial to authenticate as this user, resulting in unauthorized access to potentially dangerous APIs, allowing to view a...

9.1CVSS6.5AI score0.00652EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder