Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2026/09/06 11:33 p.m.•4 views

Malicious code in debug-char-code-double-encode (npm)

Source: amazon-inspector cf04c663a92261e5204471a60b4f4195cd06203bbc747e721e88d638e35efbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:15 a.m.•4 views

Malicious code in cluster-decompress-double-encode-quick (npm)

Source: amazon-inspector e10963e1b5a699315201d9cc43a9f176273375135c17ca2a87f1f06dd03cd0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/13 3:23 a.m.•18 views

Malicious code in debug-char-code-double-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf04c663a92261e5204471a60b4f4195cd06203bbc747e721e88d638e35efbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•12 views

EUVD-2025-179702

Malicious code in cluster-decompress-double-encode-quick npm...

6.6AI score
SaveExploits0
NVD
NVD
•added 2018/02/06 4:29 p.m.•30 views

CVE-2015-3619

Cross-site scripting XSS vulnerability in assets/js/vm2admin.js in the VirtueMart component before 3.0.8 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors involving a "double encode combination of firstname, lastname and company."...

5.4CVSS5.3AI score0.00799EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2018/02/06 4:00 p.m.•35 views

CVE-2015-3619

Cross-site scripting XSS vulnerability in assets/js/vm2admin.js in the VirtueMart component before 3.0.8 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors involving a "double encode combination of firstname, lastname and company."...

5.3AI score0.00799EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/06 12:00 a.m.•9 views

CVE-2015-3619: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in assets/js/vm2admin.js in the VirtueMart component before 3.0.8 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors involving a "double encode combination of firstname, lastname and company."...

5.4CVSS6AI score0.00799EPSS
SaveExploits0References2
Rows per page
Query Builder