24 matches found
Credential Exposure
Overview nocodb is a NocoDB Affected versions of this package are vulnerable to Credential Exposure in the password column of the ncviews table in public-datas.service.ts, public-metas.service.ts and calendar-datas.service.ts, where passwords are stored in plaintext. An attacker can obtain...
EUVD-2025-199634
SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opaccss/ajaxselector.php component via the id and datas parameters...
CVE-2025-61167
SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opaccss/ajaxselector.php component via the id and datas parameters...
CVE-2025-61167
SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opaccss/ajaxselector.php component via the id and datas parameters...
CVE-2025-61167
SIGB PMB version v8.0.1.14 contains multiple SQL injection vulnerabilities within the /opac_css/ajax_selector.php component. These flaws are triggered via the id and datas parameters, where improper handling of crafted input may allow for unauthorized database access or modification. Remediation ...
CVE-2025-61167: Improper Neutralization of Special Elements used in an SQL Command
SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opaccss/ajaxselector.php component via the id and datas parameters...
Malicious code in gets-random-datas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d13279c0dfe50ca0e8f75374e6903bf163c9fa3b46842da81459f75f423a88d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview gets-random-datas is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-35019
Malicious code in gets-random-datas npm...
MAL-2025-48519 Malicious code in gets-random-datas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d13279c0dfe50ca0e8f75374e6903bf163c9fa3b46842da81459f75f423a88d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in random-datas (npm)
The package random-datas was found to contain malicious code...
MAL-2025-42062 Malicious code in random-datas (npm)
The package random-datas was found to contain malicious code...
MAL-2025-9909 Malicious code in @zalastax/nolb-_datas (npm)
The package @zalastax/nolb-datas was found to contain malicious code...
Malware in fetch-datas
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in fetch-datas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 772f76864444435980309a4814e4b5afe9784a64fee59182bf87bfd2618d29e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1379 Malicious code in fetch-datas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 772f76864444435980309a4814e4b5afe9784a64fee59182bf87bfd2618d29e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1361 Malicious code in discord-datas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdc0b10c3c3f41706cb302d6e6b02afb133f5baa93c16a2b34c6f32a6a242c22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in discord-datas
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2024-29432
Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas...
ALLDATA SQL注入漏洞
ALLDATA is an online resource for automotive original equipment manufacturer information from ALLDATA, Inc. It provides diagnostic and repair information for vehicle manufacturers. A SQL injection vulnerability exists in ALLDATA version V0.4.6, which stems from the tablename parameter in...