8971 matches found
EUVD-2025-124461
Malicious code in nightwatch-cosmiconfig-semantic-ui-development npm...
EUVD-2025-123065
Malicious code in puppeteer-pino-electron-builder-development npm...
EUVD-2025-122005
Malicious code in shelljs-library-development-commitlint npm...
Malicious code in development-version-schema-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2586cf4822cda61df50eb0bfa4582629e0cd68ad53f04da400f1d2d3850cd2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111972
Malicious code in kaus-elara-relay-development npm...
EUVD-2025-116449
Malicious code in atlas-pyxis-prompts-development npm...
EUVD-2025-113238
Malicious code in geckodriver-miranda-development-colors npm...
EUVD-2025-114481
Malicious code in development-query-pm2-uglify-js npm...
EUVD-2025-113434
Malicious code in framework-dactyl-exec-development npm...
EUVD-2025-122077
Malicious code in semantic-ui-fork-development-jest npm...
EUVD-2025-124053
Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development npm...
EUVD-2025-122693
Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development npm...
MAL-2025-141050 Malicious code in configstore-enif-development-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18867f5616affb9421d74ecd880425debcb7b7e0fc1670211003ddec8dc395d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148648 Malicious code in thuban-development-transform-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CentralSquare Community Development 安全漏洞
CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7 that stems from unfiltered input in the permitno field, which could lead to an SQL...
CVE-2025-64280
A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...
PT-2025-46671
Name of the Vulnerable Software and Affected Versions CentralSquare Community Development version 19.5.7 Description A SQL Injection issue exists in CentralSquare Community Development 19.5.7. Attackers can inject SQL code through the permit no field. Recommendations Update to a newer version tha...
CVE-2025-64280
A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...
CVE-2025-64280
CVE-2025-64280 affects CentralSquare Community Development 19.5.7. The vulnerability is a SQL injection through the permit_no field caused by unfiltered input in the application, with CVSS v3.1 base score 9.8 (CRITICAL). The impact targets confidentiality, integrity, and availability. No exploita...