4335 matches found
Malicious Package
impala is a malicious package. The package contains malicious code that when executed by the browser, leaks password, cvc, cardnumber from form fields and send the extracted values to https://js-metrics.com/minjs.php?pl=...
Malicious Package
simple-alipay is a malicious package. The package contains malicious code that when executed in the browser, leaks password, cvc, cardnumber fields from form fields and send the data to https://js-metrics.com/minjs.php?pl=...
GHSA-J5JC-JF8F-86Q7 Malicious Package in dictum.js
Version 1.0.5 of dictum.js contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.5 of this module is found installed you will...
Malicious Package in s3asy
Version 0.4.8 of s3asy contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.4.8 of this module is found installed you will want ...
Malicious Package in dossier
Version 0.0.4 of dossier contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.4 of this module is found installed you will wan...
Malicious Package in dynamo-schema
Version 0.0.3 of dynamo-schema contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.3 of this module is found installed you wi...
Malicious Package in css_transform_support
Version 1.0.2 of csstransformsupport contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.2 of this module is found installed...
GHSA-HFC6-79WV-5HPW Malicious Package in blingjs
Version 0.0.4 of blingjs contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.4 of this module is found installed you will wan...
GHSA-M25Q-FWG4-9V2P Malicious Package in awesome_react_utility
Version 1.0.2 of awesomereactutility contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.2 of this module is found installed...
GHSA-C82C-8PJW-6829 Malicious Package in @impala/bmap
Version 1.0.3 of @impala/bmap contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.3 of this module is found installed you wil...
Malicious Package in @impala/bmap
Version 1.0.3 of @impala/bmap contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.3 of this module is found installed you wil...
PT-2020-21233
Name of the Vulnerable Software and Affected Versions dossier version 0.0.4 Description The issue concerns malicious code in version 0.0.4 of the dossier module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the...
PT-2020-21524
Name of the Vulnerable Software and Affected Versions dynamo-schema version 0.0.3 Description The issue concerns malicious code in version 0.0.3 of the dynamo-schema module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and send...
IBM Resilient SOAR Denial of Service Vulnerability
IBM Resilient is a suite of incident response platforms from IBM in the United States. The platform supports functions such as incident response process orchestration and incident management. IBM Resilient has a security vulnerability that stems from the fact that building form fields in a POST,...
Foxit PDF Reader Javascript Field Action Validate Remote Code Execution Vulnerability
Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...
Malicious Package
bmap is a malicious package. The malicious code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...
PT-2019-9522
Name of the Vulnerable Software and Affected Versions Newgen OmniFlow Intelligent Business Process Suite iBPS version 7.0 Description The issue arises from improper server-side validation, allowing client-side validations to be tampered with. This enables inappropriate information to be stored on...
Malicious Package
Overview Version 1.0.5 of pyramid-proportion contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment...
Malicious Package
Overview Version 0.2.5 of jquery-airload contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's...