Lucene search
K

43 matches found

Cvelist
Cvelist
added 2026/02/01 11:2 p.m.31 views

CVE-2026-1733 Zhong Bang CRMEB :uni tidyOrder improper authorization

A vulnerability was identified in Zhong Bang CRMEB up to 5.6.3. This affects the function detail/tidyOrder of the file /api/storeintegral/order/detail/:uni. The manipulation of the argument orderid leads to improper authorization. The attack can be initiated remotely. The exploit is publicly...

5.3CVSS0.00019EPSS
Exploits1References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 8:46 p.m.3 views

Malicious code in integral_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db72c70fab06809e70f842709b80bb228bfe2e73446e76af21d1e7af713ddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 8:46 p.m.3 views

Malicious code in integral_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67a4e4a3bf39c92b4e0519021632e79b1f57ab8434e539e6bfb73e916d761c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSV
OSV
added 2025/11/11 8:46 p.m.1 views

MAL-2025-127430 Malicious code in integral_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67a4e4a3bf39c92b4e0519021632e79b1f57ab8434e539e6bfb73e916d761c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
EUVD
EUVD
added 2025/11/11 3:19 p.m.0 views

EUVD-2025-91065

Malicious code in integraloctopusz3n npm...

6.6AI score
Exploits0
EUVD
EUVD
added 2025/11/11 7:44 a.m.1 views

EUVD-2025-76538

Malicious code in integralkiwi-notthedevs npm...

6.6AI score
Exploits0
EUVD
EUVD
added 2025/11/11 7:31 a.m.0 views

EUVD-2025-78994

Malicious code in integralmolluskz3n npm...

6.6AI score
Exploits0
EUVD
EUVD
added 2025/11/11 7:31 a.m.0 views

EUVD-2025-78992

Malicious code in integralwildebeestz3n npm...

6.6AI score
Exploits0
EUVD
EUVD
added 2025/11/11 7:26 a.m.1 views

EUVD-2025-81530

Malicious code in integralreindeerdumbs npm...

6.6AI score
Exploits0
EUVD
EUVD
added 2025/11/11 12:41 a.m.1 views

EUVD-2025-53720

Malicious code in integral-peach-goat npm...

6.6AI score
Exploits0
EUVD
EUVD
added 2025/11/11 12:41 a.m.1 views

EUVD-2025-53723

Malicious code in integral-crimson-wombat npm...

6.6AI score
Exploits0
EUVD
EUVD
added 2025/11/11 12:41 a.m.0 views

EUVD-2025-53722

Malicious code in integral-green-marlin npm...

6.6AI score
Exploits0
EUVD
EUVD
added 2025/11/11 12:41 a.m.1 views

EUVD-2025-53721

Malicious code in integral-lime-cod npm...

6.6AI score
Exploits0
EUVD
EUVD
added 2025/11/10 6:2 p.m.0 views

EUVD-2025-49974

Malicious code in integralbasiliskz3n npm...

6.6AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/05/15 12:0 a.m.3 views

Neural-Inspired Advances in Integral Cryptanalysis

The study by Gohr et.al at CRYPTO 2019 and sunsequent related works have shown that neural networks can uncover previously unused features, offering novel insights into cryptanalysis. Motivated by these findings, we employ neural networks to learn features specifically related to integral...

6.8AI score
Exploits0
OSV
OSV
added 2024/05/02 3:15 p.m.3 views

CVE-2024-4406

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the...

9.6CVSS6.2AI score0.70135EPSS
Exploits0References1
NVD
NVD
added 2024/05/02 3:15 p.m.14 views

CVE-2024-4406

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the...

9.6CVSS8.7AI score0.70135EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/02 3:2 p.m.21 views

CVE-2024-4406 Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the...

8.8CVSS7.2AI score0.70135EPSS
Exploits0References1
CVE
CVE
added 2024/05/02 3:2 p.m.74 views

CVE-2024-4406

This CVE affects Xiaomi Pro 13 smartphones (GetApps) via the integral-dialog-page.html flaw. The root cause is improper sanitization when parsing the integralInfo parameter, enabling arbitrary script injection that can lead to remote code execution in the context of the current user. Exploitation...

9.6CVSS8.5AI score0.70135EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/02 3:2 p.m.15 views

CVE-2024-4406 Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the...

8.8CVSS8.8AI score0.70135EPSS
Exploits0References1
Rows per page
Query Builder