EUVD-2024-52176

Malicious code in bioql PyPI...

EUVD-2023-44177

Malicious code in bioql PyPI...

EUVD-2025-5369

Malicious code in bioql PyPI...

EUVD-2021-8673

Malicious code in bioql PyPI...

EUVD-2022-5155

Malicious code in bioql PyPI...

EUVD-2022-1334

Malicious code in bioql PyPI...

Exploit for Cross-site Scripting in Snipeitapp Snipe-It

PoC for CVE-2025-59712 and CVE-2025-59713 This PoC provides a...

DNS Hijacking 101: How It Happens and What You Can Do to Prevent It

...

Malicious Package

Overview com.venly.sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Unmasking Hidden Threats: Spotting a DPRK IT-Worker Campaign

Unmasking Hidden Threats: Spotting a DPRK IT-Worker Campaign By Duy-Phuc Pham and John Fokker · September 23, 2025 In today's complex threat landscape, staying ahead of sophisticated adversaries is paramount. Organizations face constant pressure to identify threats that do not always involve...

Malicious Package

Overview tailwind-classes-overrides is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in dowload_ebok_see_how_they_lie_by_sue_wallman_7f3za (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fa49dec8d439a9b9749b02cc494c69fbc1a39a7aa95be72aff02ef85608c978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

Snipe-IT allows XSS

Snipe-IT before 8.1.18 allows XSS...

GHSA-C9WP-PR7F-HFQM Snipe-IT allows XSS

Snipe-IT before 8.1.18 allows XSS...

Deserialization of Untrusted Data

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserialization process. An attacker can execute arbitrary code or manipulate application data by providing crafted serialized...

Snipe-IT allows unsafe deserialization

Snipe-IT before 8.1.18 allows unsafe deserialization...

GHSA-PHWJ-FGCH-XVRJ Snipe-IT allows unsafe deserialization

Snipe-IT before 8.1.18 allows unsafe deserialization...

Cross-site Scripting (XSS)

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper input validation in the process responsible for handling user-supplied data. An attacker can execute arbitrary scripts in the context o...