56 matches found
Malicious code in sam-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e593046a8f405a1a571d19aaa6bd46db57c4a22fce4b9acfc114dd4eb8ffb6 [email protected] is a malicious package whose only purpose is to deliver a prompt-injection payload targeting AI coding assistants Copilot, Cursor,...
MAL-2026-5807 Malicious code in sam-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e593046a8f405a1a571d19aaa6bd46db57c4a22fce4b9acfc114dd4eb8ffb6 [email protected] is a malicious package whose only purpose is to deliver a prompt-injection payload targeting AI coding assistants Copilot, Cursor,...
EUVD-2025-37068
Malicious code in greet-test npm...
Malicious code in greet-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30f8cd06e021bf526fe03bcd0e36719d5cb4afcb10a57f58d28b5ba6f8ff3db The package greet-test was found to contain malicious code...
MAL-2025-49225 Malicious code in greet-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30f8cd06e021bf526fe03bcd0e36719d5cb4afcb10a57f58d28b5ba6f8ff3db The package greet-test was found to contain malicious code...
Malicious code in @ibm-ptc/greet-me (npm)
The package @ibm-ptc/greet-me was found to contain malicious code...
Malicious code in test-mlw2-greet-ducal (npm)
The package test-mlw2-greet-ducal was found to contain malicious code...
MAL-2025-8074 Malicious code in @ibm-ptc/greet-me (npm)
The package @ibm-ptc/greet-me was found to contain malicious code...
MAL-2025-35450 Malicious code in test-mlw2-greet-ducal (npm)
The package test-mlw2-greet-ducal was found to contain malicious code...
CVE-2024-13444
The wp-greet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via...
CVE-2024-13444
CVE-2024-13444 affects the WordPress plugin wp-greet up to version 6.2. The issue is a Cross-Site Request Forgery that relies on missing/weak nonce validation, enabling unauthenticated attackers to cause administrator-triggered actions and inject scripts via forged requests. The vulnerability is ...
CVE-2024-13444 wp-greet <= 6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The wp-greet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via...
CVE-2024-13444 wp-greet <= 6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The wp-greet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via...
WordPress wp-greet plugin <= 6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin wp-greet versions = 6.2...
WordPress plugin wp-greet 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
Girls Who Code Summer Immersion Program - Week One
Written by Lisa Adams The Girls Who Code Summer Immersion program at Akamai Technologies is off to a great start! During Week 1 we welcomed the class of 20 girls and the teaching team of three instructors from Girls Who Code. The girls began learning how to program in the Scratch language, and...
PhpMyDesktop/Arcade 1.0 Final - (phpdns_basedir) RFI Vulnerability
No description provided by source. Name : PhpMyDesktop|arcade 1.0 Final phpdnsbasedir Remote File Include Download From : http://mesh.dl.sourceforge.net/sourceforge/pmd-arcade/pmdarcade10final.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Powered by phpMyDesktop|arcade v1.0...
SazCart 1.5.1 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source. -========================================== ViVa Islam + YeMeN ====================================- Name : SazCart 1.5.1 Multiple Remote File Include Vulnerability Download From : http://www.sazcart.com/site/download.php?id=16 Found By : RoMaNcYxHaCkEr...
phpBP <= RC3 (2.204) FIX4 Remote SQL Injection Vulnerability
No description provided by source. .-----------------------------------------------------------------------------. | vuln.: phpBP = RC3 2.204 FIX4 Remote SQL Injection Vulnerability | | download: http://www.phpbp.com/ | | dork: PHP BP Team | | | | author: [email protected] | | homepage:...
Elfchat 5.1.2 Pro Cross Site Scripting
+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Elfet - ElfChat 5.1.2 Pro XSS x-x Cross Site Scripting Vulnerable Date : 2012-07-05 Author : Avatar Fearless Software link :...