MAL-2025-172878 Malicious code in ananda-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84ebf3760efd3b0282a2ac03639d84b45d18c3044348d3e33d7c390746b997b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-ragi93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761b63de8c6f75e682d850d7b317b06c0d8ddeb00b8fb7adc079c6b1ba86d1ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

hes.com.mx Cross Site Scripting vulnerability OBB-1485680

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

en.krankenkassenportal.ch XSS vulnerability

Open Bug Bounty ID: OBB-678568 Description| Value ---|--- Affected Website:| en.krankenkassenportal.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Trend Micro Hosted Email Security (HES) Interception / Insecure Direct Object Reference

Date: 24-Aug-2017 Product: Trend Micro Hosted Email Security HES Versions affected: Hosted Email Security before January 2012. Vulnerability: Two vulnerabilities were discovered. The first allowed any HES user to intercept in-transit emails through the Trend Micro Hosted Email Security cloud...

CVE-2006-4024

The FESTAHESLoad function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a negative LoadAddr value in a HES file, which is used as an offset in a memcpy operation and leads to a buffer underflo...

Festalon Nintendo music files player memory corruption

Memory corruption on playing HES files...