Lucene search
+L

383 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/19 8:23 a.m.8 views

Malicious code in tnactgfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc53eec6bc0141b35cd02a25f78b5c7862e6b8ed845eb0b47da084b5d3582396 The package tnactgfds was found to contain malicious code. Source: ghsa-malware 40a7fc6d425dcaf14cd401ae7c14ef495455f779891345d9844a6465c7d4f795 Any...

6.9AI score
SaveExploits0References1
Veracode
Veracode
added 2025/11/18 4:59 p.m.10 views

Files Or Directories Accessible To External Parties

Apache Kylin is vulnerable to Files or Directories Accessible to External Parties. The vulnerability is due to improper access controls on certain files or directories, which allows an attacker to access resources that should be restricted if administrative access is not adequately protected...

7.5CVSS7AI score0.18392EPSS
SaveExploits0References7Affected Software7
RedhatCVE
RedhatCVE
added 2025/11/12 3:2 p.m.10 views

CVE-2025-11959

Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Premierturk Information Technologies Inc. Excavation Management Information System allows Footprinting, Functionality Misuse.This issue affects Excavation...

8.1CVSS6.8AI score0.00274EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/11 3:31 p.m.7 views

EUVD-2025-84341

Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Premierturk Information Technologies Inc. Excavation Management Information System allows Footprinting, Functionality Misuse.This issue affects Excavation...

8.1CVSS6.4AI score0.00274EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.9 views

PT-2025-46345

Name of the Vulnerable Software and Affected Versions Premierturk Information Technologies Inc. Excavation Management Information System versions prior to 10.2025.01 Description A condition exists that allows exposure of private personal information to an unauthorized actor and enables...

8.1CVSS6.3AI score0.00274EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/11/07 9:53 p.m.16 views

CVE-2025-64327

ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. Versions 0.6.7 and below contain a Blind Server-Side Request Forgery SSRF vulnerability, in its /api/ping?url= endpoint. This allows an attacker to make arbitrary requests to internal or external hosts. This...

5.3CVSS6.7AI score0.00322EPSS
SaveExploits1References1
CISA KEV Catalog
CISA KEV Catalog
added 2025/11/04 12:0 a.m.8 views

Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files...

7.5CVSS6.8AI score0.92094EPSS
SaveIn wildExploits4
Snyk
Snyk
added 2025/10/28 5:49 p.m.1 views

Files or Directories Accessible to External Parties

Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties via the secure persistent volume feature. An attacker can access confidential data stored in persistent volumes by providing a crafted LUKS2 volume with a null key-encryption algorithm...

5.2CVSS6.7AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2025/10/21 6:2 p.m.12 views

Shopware vulnerable to Server-Side Request Forgery (SSRF) – order invoice

Impact This vulnerability allows malicious actors to force the application server to send HTTP requests to both external and internal servers. In certain cases, this may lead to access to internal resources such as databases, file systems, or other services that are not supposed to be directly...

7AI score
SaveExploits0References3Affected Software2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-4579

Malware in sbrugna...

7.5CVSS8.1AI score0.01722EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-18318

Malware in sbrugna...

9.9CVSS9.3AI score0.0251EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-20117

Malware in sbrugna...

7.5CVSS7.5AI score0.01195EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/10/06 5:13 p.m.9 views

CVE-2025-61734

Files or Directories Accessible to External Parties vulnerability in Apache Kylin. You are fine as long as the Kylin's system and project admin access is well protected. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the...

7.5CVSS6.6AI score0.18392EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-39144

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00332EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.23 views

EUVD-2023-1940

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.01247EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2023-23516

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.006EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-24234

Malicious code in bioql PyPI...

7.8CVSS6.4AI score0.00137EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2024-38103

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00398EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2021-8408

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00947EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.18 views

EUVD-2024-50408

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.00308EPSS
SaveExploits0References1
Rows per page
Query Builder