Lucene search
+L

6 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 1:48 p.m.•22 views

Malicious code in devplatform-humanize-network-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d18ba9f3689dbc03127a3d82ffe0a6a2a15edf3e7f58b7ca9322499b2b68197 [email protected] advertises itself as a network-error humanizing utility, but on require its index.js unconditionally loads...

5.6AI score
SaveExploits0References2
OSV
OSV
•added 2026/07/14 5:09 a.m.•15 views

MAL-2026-10563 Malicious code in humanize-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 602dcf2b61d28dfcdb2a5e3d0193b27f087d7e1c1714eed7d6f16c5a495d12cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.1AI score
SaveExploits0References1
OSV
OSV
•added 2023/10/04 7:15 p.m.•13 views

CVE-2023-27121

A cross-site scripting XSS vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v7.11.41.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cronString parameter...

6.1CVSS5.9AI score0.23184EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/10/04 7:15 p.m.•18 views

CVE-2023-27121

A cross-site scripting XSS vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v7.11.41.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cronString parameter...

6.1CVSS6.5AI score0.23184EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/10/04 12:00 a.m.•14 views

Pleasant Solutions Pleasant Password Server Cross-Site Scripting Vulnerability

Pleasant Solutions Pleasant Password Server is a proprietary multi-user enterprise password server from Pleasant Solutions. A security vulnerability exists in Pleasant Solutions Pleasant Password Server version v7.11.41.0, which originates from a cross-site scripting XSS vulnerability in the...

6.1CVSS5.7AI score0.23184EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/04 12:00 a.m.•1 views

CVE-2023-27121: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v7.11.41.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cronString parameter...

6.1CVSS6.5AI score0.23184EPSS
SaveExploits1References2
Rows per page
Query Builder