12015 matches found
Malicious code in fgrttry565be (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...
Malicious code in tstfde54545 (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...
Malicious code in com.adobe.cq.core.wcm.components.content (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...
MAL-2025-1541 Malicious code in charts-e2e (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...
MAL-2025-1545 Malicious code in testing098765 (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...
MAL-2025-1543 Malicious code in fgrttry565be (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...
Malicious code in archon1 (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7bb776dd2e73bc0826f47abfa61c8a0116dc3a78fd66b3924379c9971278e3b Any computer that has this package install...
Malicious code in zooplus (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 338ded2323b894429782cac281caf09ea97a7fdd7f43c23a4d058b8947d806cb Any computer that has this package install...
Malicious code in metamask-design-tokens-tailwind (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4376a3d800319e2df7e817984307b066ba79cc3b9f0785a2899c7c6deaf11083 Any computer that has this package install...
Malicious code in cse-common-arch--long-running-app--create-vm-cf (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0082d72cd8ecadc18bff535a47c4269d9f8ed6d91c6c4a68c6285abf1fe38320 Any computer that has this package install...
MAL-2025-1531 Malicious code in cse-common-arch--long-running-app--create-vm-cf (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0082d72cd8ecadc18bff535a47c4269d9f8ed6d91c6c4a68c6285abf1fe38320 Any computer that has this package install...
Malicious code in metamask-sdk-create-react-app (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed98a81fafea025740493667412dfaf8dd28cd12988fabdf1118a1765a12733d Any computer that has this package install...
CVE-2025-1006
Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. Chromium security severity: Medium...
CVE-2025-0998
Rejected reason: Not exploitable...
CVE-2025-25990
Cross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component...
Broadcom SANnav 安全漏洞
Broadcom SANnav is a suite of SAN management platforms from Broadcom Corporation USA. A security vulnerability exists in Broadcom SANnav that stems from an encryption key that could be written to and retrieved from Brocade SANnav's supportsave during Brocade SANnav installations or upgrades under...
CVE-2025-25991
The content management system hooskcms v.1.7.1 is susceptible to an SQL Injection vulnerability (CWE-89). A remote attacker can exploit the /install/index.php component to obtain sensitive information . While the vulnerability is confirmed, there is currently no information regarding a newer vers...
PT-2025-7118 · Hooskcms · Hooskcms
Name of the Vulnerable Software and Affected Versions: hooskcms version 1.7.1 Description: The issue allows a remote attacker to obtain sensitive information through the "/install/index.php" component. This is due to a Cross Site Scripting vulnerability. Recommendations: For hooskcms version 1.7....
PT-2025-7119
Name of the Vulnerable Software and Affected Versions: hooskcms version 1.7.1 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the "/install/index.php" component. Recommendations: For hooskcms version 1.7.1, update to a version that fixes this...