105 matches found
MAL-2024-1129 Malicious code in espn-react-oneid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4692f32d575cbdbf797aea5aabd0d50c4015884bfac1ce7b40006443bd8759f6 The OpenSSF Package Analysis project identified 'espn-react-oneid' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in espn-react-oneid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4692f32d575cbdbf797aea5aabd0d50c4015884bfac1ce7b40006443bd8759f6 The OpenSSF Package Analysis project identified 'espn-react-oneid' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Associated Press, ESPN, CBS among top sites serving fake virus alerts
ScamClub is a threat actor whos been involved in malvertising activities since 2018. Chances are you probably ran into one of their online scams on your mobile device. Confiant, the firm that has tracked ScamClub for years, released a comprehensive report in September while also disrupting their...
Malicious code in espn-lazysizes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60130f7b2b231061cc46a7cd1f6e01e416c6eaa83410e500788fd34809d817e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in espn-critical (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c474e2370da6b06c90e151e8bde6e4b3e0f0e06d75f6b0f0bd2919f0b9aaf675 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2853 Malicious code in espn-lazysizes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60130f7b2b231061cc46a7cd1f6e01e416c6eaa83410e500788fd34809d817e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2852 Malicious code in espn-critical (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c474e2370da6b06c90e151e8bde6e4b3e0f0e06d75f6b0f0bd2919f0b9aaf675 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-253 Malicious code in @espn/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c01b035156efe98723a341a81abfefda64ddf596c8456ae829ca3371eed8ba9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-254 Malicious code in @espn-lazysizes/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54f13287006cc46085a40aefef14b533bc8c03a746796ea46c41ea4b6249eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @espn/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c01b035156efe98723a341a81abfefda64ddf596c8456ae829ca3371eed8ba9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
espn.in Cross Site Scripting vulnerability OBB-2541763
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
espn.com.sg Cross Site Scripting vulnerability OBB-2338598
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
m.espn.com Cross Site Scripting vulnerability OBB-2146409
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fantasy.espn.com Cross Site Scripting vulnerability OBB-1222252
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
espn.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-704500 Description| Value ---|--- Affected Website:| espn.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
espn.in XSS vulnerability
Open Bug Bounty ID: OBB-703614 Description| Value ---|--- Affected Website:| espn.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
kwese.espn.com XSS vulnerability
Open Bug Bounty ID: OBB-703611 Description| Value ---|--- Affected Website:| kwese.espn.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
insider.espn.com XSS vulnerability
Open Bug Bounty ID: OBB-703608 Description| Value ---|--- Affected Website:| insider.espn.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
global.espn.com XSS vulnerability
Open Bug Bounty ID: OBB-703609 Description| Value ---|--- Affected Website:| global.espn.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
tv5.espn.com XSS vulnerability
Open Bug Bounty ID: OBB-703607 Description| Value ---|--- Affected Website:| tv5.espn.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...