22 matches found
exploit-surge-radar
Exploit Surge Radar Detect exploit-active vulnerability surge...
CVE-2025-54303
The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API. The ionadmin user account can be used to authenticate to default deployments with the password ionadmin. The user guide recommends changing default...
Malicious code in eithernet-test-fixtures-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48838 Malicious code in eithernet-test-fixtures-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48837 Malicious code in eithernet-test-fixtures (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in eithernet-test-fixtures (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in imaf-fixtures (npm)
The package imaf-fixtures was found to contain malicious code...
MAL-2025-23061 Malicious code in imaf-fixtures (npm)
The package imaf-fixtures was found to contain malicious code...
Malicious code in react-fixtures-ssr (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d710afc7119dec419c22aa6e052c351680e8510317df2c1ea02c3ab56eec3bf4 Any computer that has this package installed or running should be considered...
Malicious code in react-fixtures (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 313318cff861c45bde316c24fa07d680f6c59e74a77ae6e65c31fe66f54e2f9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8259 Malicious code in react-fixtures (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 313318cff861c45bde316c24fa07d680f6c59e74a77ae6e65c31fe66f54e2f9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ch.admin.bit.jeap:jeap-spring-boot-security-starter-it (>=17.16.0 <=17.24.1), ch.mobi.mobitor:mobitor-plugins-test (>=3.1.171 <=3.1.483) +50 more potentially affected by CVE-2023-41329 via com.github.tomakehurst:wiremock-jre8-standalone (>=2.23.2 <=2.35.0)
com.github.tomakehurst:wiremock-jre8-standalone MAVEN version =2.23.2, =17.16.0, =3.1.171, =1.0.7, =1.13.3, =1.0.0, =2.4.4, =6.7.7, =8.1.0, =6.7.7, =9.0.1, =8.5.0, =9.1.18 - de.muenchen.oss.digiwf:digiwf-coverage =1.3.0 and more Source cves: CVE-2023-41329 Source advisory: OSV:GHSA-PMXQ-PJ47-J8J4...
Malicious code in @crackle-fixtures/multi-entry-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b947e49cb6f0a8e988511d9e9b78b3cb92a5b74b3867030a23c0634171151762 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-186 Malicious code in @crackle-fixtures/multi-entry-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b947e49cb6f0a8e988511d9e9b78b3cb92a5b74b3867030a23c0634171151762 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-2X54-J4M3-R6WX sqla-yaml-fixtures is vulnerable to Code Injection
Sqlayamlfixtures versions up to 0.9.1 allows local users to execute arbitrary python code via the fixturetext argument in sqlayamlfixtures.load...
PYSEC-2019-122
Sqlayamlfixtures 0.9.1 allows local users to execute arbitrary python code via the fixturetext argument in sqlayamlfixtures.load...
decow.com XSS vulnerability
Open Bug Bounty ID: OBB-619648 Description| Value ---|--- Affected Website:| decow.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-8770
Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php,...
Design/Logic Flaw
Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, controllers/getUpdateTest.php, controllers/postclientdataTest.php, controllers/posterrorTest.php, controllers/posteventTest.php, controllers/posttagTest.php,...
Football Fixtures - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Football Fixtures published at the 'play' market has multiple vulnerabilities...