Lucene search
+L

353 matches found

Github Security Blog
Github Security Blog
•added 2025/03/25 8:54 a.m.•4 views

Malware in yxt-fe-center

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/06 12:00 a.m.•8 views

CVE-2025-2030: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform up to 20250224. It has been rated as critical. Affected by this issue is some unknown functionality of the file /security/addUser.jsp. The manipulation of the argument groupId leads to sql injection. The...

7.5CVSS6.9AI score0.00389EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/06 12:00 a.m.•5 views

PT-2025-9928

Name of the Vulnerable Software and Affected Versions Seeyon Zhiyuan Interconnect FE Collaborative Office Platform versions up to 20250224 Description A critical issue affects some unknown functionality of the file /security/addUser.jsp, where the manipulation of the groupId argument leads to SQL...

7.5CVSS0.00389EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•11 views

PT-2025-9310

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A memory corruption issue occurs while processing an input message passed from the FE driver. Recommendations At the moment, there is no information about a newer version that contains a fix f...

7.8CVSS0.00124EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•8 views

CVE-2024-53030: Improper Input Validation

Memory corruption while processing input message passed from FE driver...

7.8CVSS6AI score0.00124EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/02/14 5:15 p.m.•15 views

CVE-2025-25992

SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquireinoutitem.php component...

5.1CVSS5.9AI score0.00267EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 5:06 p.m.•8 views

Malicious code in wt-fe-buz-utilities-url (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 5:06 p.m.•9 views

Malicious code in wt-fe-buz-business-stoplimit (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2024/12/19 9:53 a.m.•5 views

Malware in acm-nano-logger-fe

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/12/05 1:36 a.m.•5 views

Malware in decode-2021-fe

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/02 6:38 a.m.•7 views

Malicious code in acm-nano-logger-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8669771f2fb91caaf8e8b4059e9466a605b69db4766b85ce718c33d1b09999a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/27 6:11 a.m.•11 views

Malicious code in eslint-plugin-sls-fe-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d5e8725b356d074bcecc1d1449ec0da5fef9ddc886c9d593dedf52a0d6f245 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2024/11/27 6:11 a.m.•18 views

MAL-2024-11037 Malicious code in eslint-plugin-sls-fe-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d5e8725b356d074bcecc1d1449ec0da5fef9ddc886c9d593dedf52a0d6f245 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/11/27 6:11 a.m.•6 views

Malware in eslint-plugin-sls-fe-lint

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/11/27 3:30 a.m.•5 views

Malware in opa-fe-base

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2024/11/27 12:55 a.m.•13 views

MAL-2024-11038 Malicious code in fe-prometheus-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 985893f86a88110b578b46b480afeeea3cece69b7d81e7ce6c54a5bb36d54ed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/27 12:55 a.m.•8 views

Malicious code in fe-prometheus-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 985893f86a88110b578b46b480afeeea3cece69b7d81e7ce6c54a5bb36d54ed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/11/27 12:55 a.m.•4 views

Malware in fe-prometheus-report

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/11/26 5:33 a.m.•5 views

Malware in paysafe-ia-v1-portal-backoffice-fe

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/14 3:46 p.m.•10 views

Malicious code in opa-fe-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0912f1fa265b4c148d99d5ebf17f99f098efa46a5222a44acee011d8ab0680df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
Rows per page
Query Builder