Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2020/09/03 7:12 p.m.•32 views

GHSA-JF55-RGPX-P6RX Malicious Package in iie-viz

Version 1.0.4 of iie-viz contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also recommended...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/09/03 12:00 a.m.•3 views

PT-2020-21370

Name of the Vulnerable Software and Affected Versions iie-viz version 1.0.4 Description The issue concerns malicious code in version 1.0.4 of the iie-viz package. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the...

5.8AI score
SaveExploits0References2
nodejs
nodejs
•added 2019/08/06 6:54 p.m.•24 views

Malicious Package

Overview Version 1.0.4 of iie-viz contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also...

7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder