1660 matches found
CVE-2021-37700
@github/paste-markdown is an npm package for pasting markdown objects. A self Cross-Site Scripting vulnerability exists in the @github/paste-markdown before version 0.3.4. If the clipboard data contains the string , a div is dynamically created, and the clipboard content is copied into its...
CVE-2021-21399
Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you must use a username that is not part of the site to bypass the auth checks. For more details and...
GHSA-RVHC-RCH9-J943
creationtimestamp| type| source ---|---|--- 2025-05-21 14:43:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17120...
CVE-2025-47775
creationtimestamp| type| source ---|---|--- 2025-05-14 15:08:16+00:00| published-proof-of-concept| https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3...
CVE-2025-47280
Umbrao Forms HTML injection : The Send email workflow in Umbraco Forms (versions 7.x through just before 13.4.2 and 15.1.2) does not HTML-encode user-provided field values, allowing potential email spoofing or bypass of security checks. Affected forms can patch by updating to 13.4.2 or 15.1.2, or...
Malicious code in ascpc-npm-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dfc46bf902782d78e5120173d965b16776b6f7d52ac27e8b6a05eb734290dce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-892P-PQRR-HXQR
creationtimestamp| type| source ---|---|--- 2025-05-02 17:16:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14526...
GHSA-7MPF-6GG2-2FJP
creationtimestamp| type| source ---|---|--- 2025-04-30 18:14:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14112...
GHSA-CV2P-32V3-VHWQ
creationtimestamp| type| source ---|---|--- 2025-04-23 17:04:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13077...
CVE-2025-46567
creationtimestamp| type| source ---|---|--- 2025-04-23 08:41:15+00:00| published-proof-of-concept| https://github.com/hiyouga/LlamaFactory/security/advisories/GHSA-f2f7-gj54-6vpv...
GHSA-5V2H-R2CX-5XGJ
creationtimestamp| type| source ---|---|--- 2025-04-22 19:03:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12954...
GHSA-H5G4-PPWX-48Q2
creationtimestamp| type| source ---|---|--- 2025-04-22 18:03:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12926...
GHSA-8C28-5MP7-V24H
creationtimestamp| type| source ---|---|--- 2025-04-21 15:02:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12668...
GHSA-H4Q8-96P6-JCGR
creationtimestamp| type| source ---|---|--- 2025-04-16 14:56:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12060...
Malicious code in lme4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d886ca0d77375a13d7b0c7d522f2dae6e996f8d069f1337810a23c86e040412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-58H4-9M7M-J9M4
creationtimestamp| type| source ---|---|--- 2025-04-08 13:46:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10903...
CVE-2025-28269
creationtimestamp| type| source ---|---|--- 2025-04-06 18:13:23+00:00| published-proof-of-concept| https://github.com/rrainn/js-object-utilities/security/advisories/GHSA-hpqf-m68j-2pfx...
CVE-2025-71319
creationtimestamp| type| source ---|---|--- 2025-04-02 15:04:58+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-m5qc-5hw7-8vg7 2026-07-01 15:14:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplsnpvgpw2o 2026-07-02 23:55:28+00:00| seen|...