Malicious code in apinitro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2432ee5fdd6d6e0847ce825a3d0fe0b2b8f15b3f91b7977d7a29e62917cb59de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6612 Malicious code in topicmodeling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58368b384698175b4023e096d423a5a8c3a22d4dbb8651b2b4c9ad74c19d3161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31753

The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability...

Complete Online Job Search System SQL注入漏洞（CNVD-2022-48790）

Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/admin/employee/index.php?view=edit&id=page Lack of validation of externally entered SQL statements. An attacker could use this...

Badminton Center Management System SQL注入漏洞（CNVD-2022-44732）

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records. Badminton Center Management System version v1.0 is vulnerable to S...

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55723)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/stockin/index.php?view=edit&id= The page lacks validation of externally entered SQL...

Exploit for CVE-2022-30190

Follina-CVE-2022-30190 Proof of Concept by Nee Usage ba...

Exploit for CVE-2022-30190

Follina-CVE-2022-30190 Proof of Concept by Nee Usage ba...

Malicious code in epic-ue-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7979dce3b3be977cb7f1e59666ccb211221329338f2d557e5f30c3427a98503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 CVE-2022-30190 Follina POC Hos...

Exploit for CVE-2022-30190

CVE-2022-30190-follina Just another PoC for the new MSDT-Explo...

Exploit for CVE-2022-30190

CVE-2022-30190 Usag...

Exploit for CVE-2022-30190

Follina Proof of Concept CVE-2022-30190 Quick and easy "pro...

Exploit for CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html...

CVE-2022-1215: Use of Externally-Controlled Format String

A format string vulnerability was found in libinput...

Calibre-Web SQL Injection Vulnerability

Calibre-Web is a Web application for browsing, reading and downloading eBooks from the Calibre database.A SQL injection vulnerability exists in versions prior to Calibre-Web 0.6.18.The vulnerability stems from the application's lack of validation of externally entered SQL statements, which can be...

CVE-2022-25990

On 1.0.x versions prior to 1.0.1, systems running F5OS-A software may expose certain registry ports externally. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Joomla! SQL Injection Vulnerability (CNVD-2022-64102)

Joomla! is a set of forum components used in the Joomla! content management system. SQL injection vulnerabilities exist in versions 3.0.0 through 3.10.6 and 4.0.0 through 4.1.0. The vulnerability stems from the application's lack of validation of externally entered SQL statements. An attacker cou...

The vulnerability of the Spring Core module of the Spring Framework software platform allows attackers to execute arbitrary code.

The vulnerability of the Spring Core module of the Spring Framework is related to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-46703

In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. NOTE: This vulnerability only affects products that are no longer supported by the maintain...