Malicious code in @osl-design/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3237fada0f96b2160cb8adea5c7734951ca960f71f3f4bf788fec9446b6d3b The package declares "install": "node index.js" in package.json, so npm install automatically executes its top-level script. That script loads...

Blackash-CVE-2025-24071

Blackash-CVE-2025-24071 CVE-2025-24071: NTLM Hash Leak via .library-ms File, Metasploit Module 🚨 Description Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network. Metrics CNA: Microsoft Corporation...

spydir

Uso: spydir.exe Monitorea cambios en el directorio con todos los subdirectorios Para cualquier archivo, incluidos aquellos a los que no tienes acceso CVE-2007-0843 a partir de enero de 2007 c Vladimir Dubrovin, 3APA3A http://securityvulns.com http://securityvulns.ru Este enfoque no es fiable y no...

veeam-cve-2023-27532-mock

CVE-2023-27532 - Vulnerabilidad en Veeam Backup & Replication Descripción de la vulnerabilidad Veeam Backup & Replication contiene una vulnerabilidad que permite obtener las credenciales cifradas almacenadas en la base de datos de configuración, lo que permite a los atacantes acceder a los hosts ...

CVE-2018-0296

Cisco Adaptive Security Appliance - Path Traversal CVE-2018-0296 Author: Yassine Aboukir A security vulnerability identified in Cisco ASA that would allow an attacker to view sensitive system information without authentication by using directory traversal techniques. Vulnerable Products This...

CVE-2022-1011

CVE-2022-1011 Enlace de corrección: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 Esta vulnerabilidad se debe principalmente a la característica asíncrona de splice, que permite retener una parte de la memoria del proceso de...

CVE-2019-13025

Connect Box CH7465LG CVE-2019-13025 Information This repository contains two PoCs for the Connect Box CH7465LG running on Firmware CH7465LG-NCIP-6.12.18.24-5p8-NOSH or older. For more information have a look at my blog. Usage Unauthenticated Remote Code Execution $ python3 poc-rce.py...

CVE-2025-45619

Issue details Camera model PTC310UV2 running firmware version 0.1.0000.59. The vulnerability is found in the web interface that is used to access the camera. The vulnerability was found during a penetration test, thus, certain information in the PoC screenshots have been redacted. Description Thi...

CVE-2023-23752-poc

Affected versions: 4.0.0 = 4.2.8 Joomla 3 and below are not affected by this vulnerability. http://127.0.0.1/Joomla/api/index.php/v1/config/application?public=true This API is used to obtain the most important configuration information of the website, including the database username and password...

CVE-2024-23897

Jenkins has a built-in command line interface CLI to access Jenkins from a script or shell environment. Jenkins uses the args4j library to parse command arguments and options on the Jenkins controller when processing CLI commands. This command parser has a feature that replaces an @ character...

CVE-2025-14847

CVE-2025-14847 Entorno de Vulnerabilidad CVE-2025-14847 con un PoC https://jira.mongodb.org/browse/SERVER-115508 RESUMEN Esta es una corrección crítica para abordar CVE-2025-14847. Actualice a 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32 o 4.4.30. DESCRIPCIÓN E IMPACTO DEL PROBLEMA Una explotación del...

CVE-2020-24030

CVE-2020-24030 Description ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and to access sensitive data via token reuse. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...

CVE-2020-24029

CVE-2020-24029 Description Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...

CVE-2019-7711

🛡️ CVE-2019-7711: Green Hills INTEGRITY RTOS Information Leak 📌 Repositorio de documentación técnica y recursos sobre la vulnerabilidad de Format String en el servidor Telnet de Green Hills INTEGRITY RTOS v5.0.4. 📖 Descripción General La vulnerabilidad afecta al servidor IPCOMShell Telnet de...

CVE-2023-28432_docker

CVE-2023-28432docker Entornos de prueba para CVE-2023-28432, divulgación de información en clústeres de MinIO. Los directorios proporcionan diferentes versiones / configuraciones para un clúster de MinIO:...

CVE-2025-63667

CVE-2025-63667 — Evidencia de Vulnerabilidad en Cámaras IP basadas en Vatilon Sanitizada Resumen Varias cámaras IP basadas en Vatilon marcas observadas: SIMICAM, KEVIEW, ASECAM emiten tokens Session-Id sin verificar la corrección de las credenciales. Esta falla permite que atacantes no autenticad...

CVE-2025-66955

CVE-2025-66955 Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls. CVSS Vectors CVSS 3.1: 7.7,...

CVE-2025-55817

Tipo de Vulnerabilidad Cross Site Scripting XSS Componente Afectado La Configuración de Conexión de Nitro GraphQL de Chillicream contiene 3 ubicaciones de entrada diferentes vulnerables a Cross Site Scripting XSS. Parámetros vulnerables: Endpoint de esquema SDL, Endpoint de suscripción, Endpoint ...

CVE-2026-97311

A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a specific role do not properly check for individual group visibility permissions. This allows a delegated administrator with basic search privileg...

CVE-2026-16302

The Spectra Legacy – Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.20.0 via the editorassets function, which exposes the uaginstalinkedaccounts option through the uagbblocksinfo object without a capability check. This...