Lucene search
K

118 matches found

Packet Storm News
Packet Storm News
added 2026/05/17 12:0 a.m.6 views

Speed Kills: Exploring Confused Deputy Attacks through Edge AI Accelerators

AI Accelerator AIA are specialized hardware e.g., Tensor Processing Unit TPU, that enable optimal and efficient execution of AI applications and on-device inference. The growing demand for AI applications has led to the widespread adoption of AIAs on Edge or embedded devices on Edge or embedded...

5.9AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/29 2:40 p.m.5 views

Malicious code in frank-newton3-user-hunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d2188a1bfb704f499669b386b4268ab26fb46de37022d5b91df575521fcf81 The package frank-newton3-user-hunt was found to contain malicious code. Source: ghsa-malware...

5.4AI score
Exploits0References1
OSV
OSV
added 2026/04/29 2:40 p.m.2 views

MAL-2026-3172 Malicious code in frank-newton3-user-hunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d2188a1bfb704f499669b386b4268ab26fb46de37022d5b91df575521fcf81 The package frank-newton3-user-hunt was found to contain malicious code. Source: ghsa-malware...

5.5AI score
Exploits0References1
Snyk
Snyk
added 2026/04/29 2:40 p.m.1 views

Malicious Package

Overview frank-newton3-user-hunt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS5.8AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/29 8:0 a.m.4 views

Malicious code in apple-infra-final-escape (npm)

Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Apple internal infrastructure services authentication, PKI, telemetry, CloudKit, and cloud infrastructure. All packages in this campaign execute credential-theft payloads durin...

6AI score
Exploits0References1
GithubExploit
GithubExploit
added 2026/04/23 9:44 p.m.77 views

cve

cve.sh — CVE Discovery & Exploitation Reporter Technology f...

9.8CVSS5.7AI score0.94391EPSS
Exploits144
CNVD
CNVD
added 2025/12/30 12:0 a.m.3 views

WordPress Gift Hunt plugin cross-site scripting vulnerability

WordPress Gift Hunt plugin is a plugin for creating interactive scavenger hunts on WordPress websites. The WordPress Gift Hunt plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be...

5.4CVSS6.1AI score0.00027EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.2 views

CVE-2025-67631

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ecommerce Platforms Gift Hunt gift-hunt allows Stored XSS.This issue affects Gift Hunt: from n/a through = 2.0.2...

5.9CVSS6AI score0.00027EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/24 3:30 p.m.2 views

EUVD-2025-205276

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ecommerce Platforms Gift Hunt gift-hunt allows Stored XSS.This issue affects Gift Hunt: from n/a through = 2.0.2...

5.4CVSS5.5AI score0.00027EPSS
Exploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.2 views

CVE-2025-67631

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ecommerce Platforms Gift Hunt gift-hunt allows Stored XSS.This issue affects Gift Hunt: from n/a through = 2.0.2...

5.9CVSS0.00027EPSS
Exploits0References1
CVE
CVE
added 2025/12/24 1:10 p.m.7 views

CVE-2025-67631

CVE-2025-67631 is an active stored XSS in the WordPress plugin Gift Hunt (Ecommerce Platforms) where improper input neutralization during web page generation allows stored XSS. The initial entry states vulnerability in Gift Hunt: from n/a through

5.9CVSS5.6AI score0.00027EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 1:10 p.m.4 views

CVE-2025-67631 WordPress Gift Hunt plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ecommerce Platforms Gift Hunt gift-hunt allows Stored XSS.This issue affects Gift Hunt: from n/a through = 2.0.2...

5.9CVSS5.6AI score0.00027EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 1:10 p.m.25 views

CVE-2025-67631 WordPress Gift Hunt plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ecommerce Platforms Gift Hunt gift-hunt allows Stored XSS.This issue affects Gift Hunt: from n/a through = 2.0.2...

5.9CVSS0.00027EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/24 9:56 a.m.4 views

WordPress Gift Hunt plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LIM MINHYOEK in WordPress Plugin Gift Hunt versions = 2.0.2...

5.4CVSS5.8AI score0.00027EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.4 views

PT-2025-53247

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ecommerce Platforms Gift Hunt gift-hunt allows Stored XSS.This issue affects Gift Hunt: from n/a through = 2.0.2...

5.4CVSS6AI score0.00027EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.2 views

WordPress plugin Gift Hunt 安全漏洞

WordPress Gift Hunt plugin is a plugin for creating interactive scavenger hunts on WordPress websites. The WordPress Gift Hunt plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be...

5.9CVSS5.8AI score0.00027EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-20653

Malware in sbrugna...

7.5CVSS7.5AI score0.0024EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-6997

Malware in sbrugna...

5.4CVSS6.4AI score0.00134EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-28752

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.01039EPSS
Exploits0References2
CISA
CISA
added 2025/07/31 12:0 p.m.2 views

CISA and USCG Issue Joint Advisory to Strengthen Cyber Hygiene in Critical Infrastructure

CISA, in partnership with the U.S. Coast Guard USCG, released a joint Cybersecurity Advisory aimed at helping critical infrastructure organizations improve their cyber hygiene. This follows a proactive threat hunt engagement conducted at a U.S. critical infrastructure facility. During this...

7.1AI score
Exploits0References1
Rows per page
Query Builder