Lucene search
+L

9 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 1:48 p.m.•31 views

Malicious code in devplatform-humanize-network-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d18ba9f3689dbc03127a3d82ffe0a6a2a15edf3e7f58b7ca9322499b2b68197 [email protected] advertises itself as a network-error humanizing utility, but on require its index.js unconditionally loads...

5.6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/14 5:09 a.m.•15 views

Malicious Package

Overview humanize-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.1AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/14 5:09 a.m.•32 views

Malicious code in humanize-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 602dcf2b61d28dfcdb2a5e3d0193b27f087d7e1c1714eed7d6f16c5a495d12cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.1AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/07/14 5:09 a.m.•22 views

MAL-2026-10563 Malicious code in humanize-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 602dcf2b61d28dfcdb2a5e3d0193b27f087d7e1c1714eed7d6f16c5a495d12cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.1AI score
SaveExploits0References1
OSS-Fuzz
OSS-Fuzz
•added 2024/05/03 4:44 p.m.•40 views

go-humanize:FuzzParseBytes: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5385521000939520 Project: go-humanize Fuzzing Engine: libFuzzer Fuzz Target: FuzzParseBytes Job Type: libfuzzerasango-humanize Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN...

5.8AI score
SaveExploits0
attackerkb
attackerkb
•added 2023/10/04 7:15 p.m.•21 views

CVE-2023-27121

A cross-site scripting XSS vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v7.11.41.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cronString parameter...

6.1CVSS6.5AI score0.22716EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2023/10/04 7:15 p.m.•20 views

CVE-2023-27121

A cross-site scripting XSS vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v7.11.41.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cronString parameter...

6.1CVSS5.9AI score0.22716EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/04 12:00 a.m.•6 views

CVE-2023-27121: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v7.11.41.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cronString parameter...

6.1CVSS6.5AI score0.22716EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/10/04 12:00 a.m.•21 views

Pleasant Solutions Pleasant Password Server Cross-Site Scripting Vulnerability

Pleasant Solutions Pleasant Password Server is a proprietary multi-user enterprise password server from Pleasant Solutions. A security vulnerability exists in Pleasant Solutions Pleasant Password Server version v7.11.41.0, which originates from a cross-site scripting XSS vulnerability in the...

6.1CVSS5.7AI score0.22716EPSS
SaveExploits1References4
Rows per page
Query Builder