1711 matches found
EUVD-2025-64337
Malicious code in electronicsilkwormz3n npm...
EUVD-2025-64340
Malicious code in electroniccatfishz3n npm...
Malicious code in electronic_catfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc9a2890cf6f69a0640da41a40944e116c15f9b31fa4d64facac0ccc25816c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-64341
Malicious code in electronicamphibianz3n npm...
EUVD-2025-54658
Malicious code in electronic-amber-crab npm...
EUVD-2025-54656
Malicious code in electronic-coffee-hawk npm...
EUVD-2025-54654
Malicious code in electronic-white-tiglon npm...
Malicious code in electronic-white-tiglon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64bbab7f84a8eac0467aad50b159cc1d425a8929dfc991e07ced926f437560a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54657
Malicious code in electronic-chocolate-mosquito npm...
EUVD-2025-54655
Malicious code in electronic-plum-anteater npm...
EUVD-2025-47917
Malicious code in electronicmockingbirdz3n npm...
ELog 安全漏洞
ELog is an electronic logging software with a web interface by the individual developer Stefan Ritt. A security vulnerability exists in ELog versions 3.1.5 through 20251014, which stems from allowing authenticated users to upload arbitrary HTML files, potentially leading to cross-site scripting...
ELog 安全漏洞
ELog is an electronic logging software with a web interface by the individual developer Stefan Ritt. A security vulnerability exists in ELog that originates from an authenticated user being able to modify other users' profiles, potentially leading to an account takeover...
PT-2025-44056
Name of the Vulnerable Software and Affected Versions eLabFTW versions prior to 5.3.0 Description eLabFTW, an electronic lab notebook, allowed the serving of uploaded SVG files inline. Due to SVG’s support for active content, a malicious SVG file could be uploaded and executed when viewed, leadin...
CVE-2025-8884 IDOR in VHS Electronic Software's ACE Center
Authorization Bypass Through User-Controlled Key vulnerability in VHS Electronic Software Ltd. Co. ACE Center allows Privilege Abuse, Exploitation of Trusted Identifiers. This issue affects ACE Center: from 3.10.100.1768 before 3.10.161.2255...
CVE-2025-8884 IDOR in VHS Electronic Software's ACE Center
Authorization Bypass Through User-Controlled Key vulnerability in VHS Electronic Software Ltd. Co. ACE Center allows Privilege Abuse, Exploitation of Trusted Identifiers. This issue affects ACE Center: from 3.10.100.1768 before 3.10.161.2255...
WordPress UPC/EAN/GTIN Code Generator plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin UPC/EAN/GTIN Code Generator versions = 2.0.2...
EUVD-2025-33860
A vulnerability was identified in code-projects E-Commerce Website 1.0. The impacted element is an unknown function of the file /pages/productaddqty.php. The manipulation of the argument prodid leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly...
uzy-ssm-mall 安全漏洞
uzy-ssm-mall yuzu cloud e-commerce is an SSM framework by ghostxbh individual developer for building e-commerce, bookstore malls, customer management, and more. A security vulnerability exists in uzy-ssm-mall version 1.1.0, which stems from improper fastjson deserialization and could lead to the...