Lucene search
+L

419 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/19 12:00 a.m.•4 views

CVE-2025-54313: Embedded Malicious Code

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows...

7.5CVSS6.7AI score0.04522EPSS
SaveExploits2References2
CISA
CISA
•added 2025/03/24 12:00 p.m.•46 views

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-30154link is external reviewdog action-setup GitHub Action Embedded Malicious Code Vulnerability These types of vulnerabilities are frequent attack vectors for...

8.6CVSS7.5AI score0.02437EPSS
SaveIn wildExploits2References6
CISA KEV Catalog
CISA KEV Catalog
•added 2025/03/24 12:00 a.m.•90 views

reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability

reviewdog action-setup GitHub Action contains an embedded malicious code vulnerability that dumps exposed secrets to Github Actions Workflow Logs...

8.6CVSS7.4AI score0.02437EPSS
SaveIn wildExploits2
Snyk
Snyk
•added 2025/03/05 4:51 p.m.•10 views

Embedded Malicious Code

Overview cdn-icon-fetch is a Malicious package. Affected versions of this package are vulnerable to Embedded Malicious Code. Once this package is installed and executed, it downloads a Javascript file from a cdn-static-server.vercel.app URL, which appears to be an image hosting site. However, by...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/01/27 12:30 p.m.•11 views

Embedded Malicious Code

Overview uniapi is an A Universal API Framework. Affected versions of this package are vulnerable to Embedded Malicious Code which contains code that executes upon importing the module. This code downloads a script from a remote URL and executes it in a thread. The downloaded script collects syst...

10CVSS7.2AI score
SaveExploits0References2
GithubExploit
GithubExploit
•added 2024/06/11 2:19 p.m.•300 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 Basic POC to test CVE-2024-3094 vulnerability in...

10CVSS8.5AI score0.85974EPSS
SaveExploits42
GithubExploit
GithubExploit
•added 2024/04/03 10:19 p.m.•262 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 Checker The CVE-2024-3094 Checker is a powerful...

10CVSS8.4AI score0.85974EPSS
SaveExploits42
GithubExploit
GithubExploit
•added 2024/04/03 7:10 p.m.•282 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094-Checker The repository consists of a checker fil...

10CVSS8.7AI score0.85974EPSS
SaveExploits42
GithubExploit
GithubExploit
•added 2024/04/03 1:09 p.m.•211 views

Exploit for Embedded Malicious Code in Tukaani Xz

xz-backdoor-CVE-2024-3094-Check Verify if your installed versi...

10CVSS8.4AI score0.85974EPSS
SaveExploits42
GithubExploit
GithubExploit
•added 2024/04/01 3:15 p.m.•356 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 CVE-2024-3094 checker - Golang Ps.: This versio...

10CVSS8.5AI score0.85974EPSS
SaveExploits42
GithubExploit
GithubExploit
•added 2024/03/30 7:38 a.m.•376 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 vul check tools This vulnerability allows an at...

10CVSS8.8AI score0.85974EPSS
SaveExploits42
GithubExploit
GithubExploit
•added 2024/03/29 11:36 p.m.•352 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 XZ-Utils Vulnerability Checker and Fixer Th...

10CVSS8.3AI score0.85974EPSS
SaveExploits42
GithubExploit
GithubExploit
•added 2024/03/29 11:20 p.m.•342 views

Exploit for Embedded Malicious Code in Tukaani Xz

xzcve-2024-3094detection Sc...

10CVSS8.5AI score0.85974EPSS
SaveExploits42
NVD
NVD
•added 2023/07/13 12:15 p.m.•35 views

CVE-2023-2003

Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device...

9.8CVSS0.00915EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/13 12:15 p.m.•37 views

Code injection

Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device...

7.5CVSS9.3AI score0.00915EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/13 12:00 a.m.•0 views

CVE-2023-2003: Embedded Malicious Code

Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device...

9.8CVSS8.2AI score0.00915EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/03/30 12:00 a.m.•16 views

3CX 安全漏洞

3CX is a software open standards-based IP PBX an IP-based corporate phone system that provides complete unified communications. A security vulnerability exists in 3CX version 18.12.416 and earlier, which stems from the inclusion of embedded malicious code...

7.8CVSS7.8AI score0.04373EPSS
SaveExploits1References7
OSV
OSV
•added 2022/03/16 11:54 p.m.•130 views

GHSA-97M3-W2CP-4XX6 Embedded Malicious Code in node-ipc

The package node-ipc versions 10.1.1 and 10.1.2 are vulnerable to embedded malicious code that was introduced by the maintainer. The malicious code was intended to overwrite arbitrary files dependent upon the geo-location of the user IP address. The maintainer removed the malicious code in versio...

9.8CVSS9.5AI score0.0426EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/07 12:00 a.m.•4 views

CVE-2017-16128: Embedded Malicious Code

The module npm-script-demo opened a connection to a command and control server. It has been removed from the npm registry...

10CVSS8AI score0.01455EPSS
SaveExploits0References3
Rows per page
Query Builder