122 matches found
Malicious code in mulyono-nasicampur82-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc937be92817203d83301fd3d8ec845afec9322e30b2edcff46d4848e0ad8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-75080 Malicious code in qori-ikan91-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4d92ab5d7aa65e6c369cfec8c60f8a3be53bcfe34f77a74188e57b0fff492e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in painful-plum-flamingo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086023496572a3e9e6a529d343abce1623bcf1759063f3de65f389d728c610fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-65791 Malicious code in umi-tumis73-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f6cabd3fe5b16685cf930e81f7036852a6114b7d50cb1612157fc543f64ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in back_hookworm_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd6d8780bdd0144e85248cd1e8ef24350aa7d7698a58b498f36d8e52d6d5b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-59115 Malicious code in umi-mangut25-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cfc768bef9d55a57347eb5db6d63ec0f2f467a7dc0c80f9456002d13fa79243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in oktafian-dodol41-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe285f739373500dc85e32f8d7573a0fa5cf214e22b617e2fa009933d4848ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
OpnForm 安全漏洞
OpnForm is a form builder by Julien Nahum Personal Developer. A security vulnerability exists in OpnForm 1.9.3 and earlier versions, which stems from an improperly access-controlled unknown function in the file/edit, which could lead to a remote attack...
CVE-2025-11440: Improper Access Control
A vulnerability was determined in JhumanJ OpnForm up to 1.9.3. Impacted is an unknown function of the file /edit. Executing manipulation can lead to improper access controls. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This patch is called...
EUVD-2024-16785
Malicious code in bioql PyPI...
EUVD-2022-43515
Malicious code in bioql PyPI...
EUVD-2024-21585
Malicious code in bioql PyPI...
EUVD-2024-16787
Malicious code in bioql PyPI...
Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.
...
CVE-2025-11195
Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file to a name that already exists. This issue stems from a lack of effective verification of the uniqueness of project...
CVE-2025-8453
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...
PT-2025-30975 · Campcodes · Best Courier Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Courier Management System version 1.0 Description: A critical issue exists in Campcodes Courier Management System version 1.0. The vulnerability is a SQL injection that affects an unknown part of the file /edit staff.php. The...
CVE-2024-1010
A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file edit-profile.php. The manipulation of the argument fullname/phone/date of birth/address/date of appointment leads to cross site scripting. It is...