227 matches found
Malware in @eric-orderbuddyinfo/react-noval
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Sprocket Security Appoints Eric Sheridan as Chief Technology Officer
Madison, United States, 20th January 2026, CyberNewsWire...
CVE-2023-25448
Cross-Site Request Forgery CSRF vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin = 1.7.4 versions...
CVE-2025-40676 Múltiples vulnerabilidades en Negotiator de BBMRI-ERIC
Insecure Direct Object Reference IDOR in Negotiator v3.15.2 from Biobanking and Biomolecular Resources - European Research Infrastructure BBMRI-ERIC. This vulnerability allows an attacker to access or modify unauthorised resources by manipulating requests that use the 'userID' parameter in...
CVE-2025-40676
CVE-2025-40676 affects Negotiator v3.15.2 from BBMRI-ERIC. The vulnerability is an insecure direct object reference (IDOR) in the userID parameter of the /api/v3/users/ endpoint, enabling an attacker to access or modify unauthorised resources and potentially expose or alter sensitive data. The CV...
EUVD-2005-3068
Malware in sbrugna...
EUVD-2025-26951
Malicious code in bioql PyPI...
EUVD-2023-33007
Malicious code in bioql PyPI...
EUVD-2023-50437
Malicious code in bioql PyPI...
EUVD-2024-34522
Malicious code in bioql PyPI...
EUVD-2023-29445
Malicious code in bioql PyPI...
EUVD-2023-29403
Malicious code in bioql PyPI...
EUVD-2025-2832
Malicious code in bioql PyPI...
EUVD-2025-10956
Malicious code in bioql PyPI...
CVE-2025-58826: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eric Mann WP Publication Archive wp-publication-archive allows Stored XSS.This issue affects WP Publication Archive : from n/a through = 3.0.1...
PT-2025-36165
Name of the Vulnerable Software and Affected Versions: Eric Mann WP Publication Archive versions through 3.0.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Eric Mann WP...
CVE-2024-32596
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eric-Oliver Mächler DSGVO Youtube allows Stored XSS.This issue affects DSGVO Youtube: from n/a through 1.4.5...
Man Behind SEC Bitcoin Hoax Tweet Sentenced in SIM Swap Hack
Eric Council Jr. sentenced for 2024 SIM swap that led to fake Bitcoin ETF tweet from SEC’s X account, briefly impacting crypto markets...
CVE-2025-26982
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eric-Oliver Mächler DSGVO Youtube dsgvo-youtube allows DOM-Based XSS.This issue affects DSGVO Youtube: from n/a through = 1.5.1...