EUVD-2025-51347

Malicious code in unique-black-echidna npm...

EUVD-2025-51913

Malicious code in soviet-orange-echidna npm...

EUVD-2025-55935

Malicious code in agricultural-aqua-echidna npm...

MAL-2025-70622 Malicious code in silky-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088a26c663c7494dbfde2050790bf881f5cbe6e3b95cce3e7f517dc8ca2669df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54251

Malicious code in forthcoming-copper-echidna npm...

EUVD-2025-52027

Malicious code in silky-rose-echidna npm...

Malicious code in sunny-aquamarine-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c2d34aa007b538b12025943cff1b6af639205f208a3697286b29e0260ccf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52767

Malicious code in petite-lavender-echidna npm...

EUVD-2025-56078

Malicious code in above-apricot-echidna npm...

EUVD-2025-51932

Malicious code in sophisticated-lavender-echidna npm...

Malicious code in main-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c12b25a27635c108d12ed4d1c57e79034142dd264d29617696882c1ac1669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53384

Malicious code in main-rose-echidna npm...

EUVD-2025-49058

Malicious code in weakechidnaz3n npm...

finalise() lacks authenticate calls to this method as anyone can access it.

Lines of code Vulnerability details Impact Unprotected call to a function sending Ether to an arbitrary address. This can be exploited by attackers . Proof of Concept function finalize public Sale memory temp = sale; requireblock.number = temp.endTime, "TOO SOON";...

It is possible to burn someone's vault tokens

Lines of code Vulnerability details Impact It is possible to burn someone's vault tokens. Exploit Scenario Let's say Alice and Bob have some vault tokens. For some reason, Bob didn't grab an ice-cream for Alice, therefore Alice wanted to revenge for that. So she decided to burn Bob's vault tokens...

Bug inside ABDKMathQuad library

Handle adelamo Vulnerability details Impact FairSideFormula library is using ABDKMathQuad library underneath. According to the ABDKMathQuad README, the range of values is the following: The minimum strictly positive subnormal value is 2^−16494 ≈ 10^−4965 and has a precision of only one bit. The...

Echidna - Ethereum Fuzz Testing Framework

Echidna is a weird creature that eats bugs and is highly electrosensitive with apologies to Jacob Stanley More seriously, Echidna is a Haskell library designed for fuzzing/property-based testing of EVM code. It supports relatively sophisticated grammar-based fuzzing campaigns to falsify a variety...

ScriptFTP 3.3 - Remote Buffer Overflow (MSF)

No description provided by source. Exploit Title: ScriptFTP 3.3 Remote Buffer Overflow MSF Date: Sept 20 2011 Author: otoy Version: 3.3 Tested on: Windows XP SP3 CVE : - EDB-ID: 17876 Thanks: cyb3r.anbu, spentera-team, dE-team, offsec, exploit-db, corelanc0d3r class Metasploit3 Msf::Exploit::Remo...

QuickShare File Share 1.2.1 Directory Traversal

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "QuickShare File...

ScriptFTP 3.3 Remote Buffer Overflow (MSF)

Exploit for windows platform in category remote exploits Exploit Title: ScriptFTP 3.3 Remote Buffer Overflow MSF Date: Sept 20 2011 Author: otoy Version: 3.3 Tested on: Windows XP SP3 CVE : - EDB-ID: 17876 Thanks: cyb3r.anbu, spentera-team, dE-team, offsec, exploit-db, corelanc0d3r class...