Lucene search
+L

6 matches found

Veracode
Veracode
•added 2026/08/14 9:41 a.m.•25 views

Incorrect Authorization

org.springframework.graphql:spring-graphql is vulnerable to Improper Authorization. The vulnerability is due to incorrect resolution of security annotations on @Controller data fetcher methods within type hierarchies, which allows an attacker to bypass authorization checks when security annotatio...

7.5CVSS6AI score0.00352EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2026/07/21 5:20 p.m.•5 views

Malicious code in polymarket-data-fetcher (PyPI)

Source: kam193 b6b5ac8b803d36ef490adff8a4d3110c4030063bbd2345e4b23d1871909638e9 The code attempts to monitor the clipboard and replace copied cryptocurrency addresses, as well as establish persistence. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

6.1AI score
SaveExploits0References3Affected Software1
Spring Security Advisories
Spring Security Advisories
•added 2026/06/10 12:00 a.m.•45 views

cve-2026-41856 - HIGH - Spring GraphQL Annotation Detection Vulnerability

cve-2026-41856 - HIGH - Spring GraphQL Annotation Detection Vulnerability...

7.5CVSS5.8AI score0.00352EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/05/24 6:23 p.m.•43 views

Malicious code in polymarket-data-fetcher (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b6b5ac8b803d36ef490adff8a4d3110c4030063bbd2345e4b23d1871909638e9 The code attempts to monitor the clipboard and replace copied cryptocurrency addresses, as well as establish persistence. --- Category: MALICIOUS - The campaig...

5.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/05/24 6:23 p.m.•33 views

MAL-2026-4286 Malicious code in polymarket-data-fetcher (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b6b5ac8b803d36ef490adff8a4d3110c4030063bbd2345e4b23d1871909638e9 The code attempts to monitor the clipboard and replace copied cryptocurrency addresses, as well as establish persistence. --- Category: MALICIOUS - The campaig...

5.9AI score
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/03/26 8:51 a.m.•130 views

Exploit for SQL Injection in Epicor Human_Capital_Management

CVE-2025-22953 – Epicor HCM Unauthenticated Blind SQL Injecti...

9.8CVSS6.2AI score0.01834EPSS
SaveExploits1
Rows per page
Query Builder