Lucene search
K

75 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 4:47 p.m.3 views

Malicious code in iomodra-fuoa-jaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8940dcd20e00962e0fba05cc550d027bff25cb0228234c5f3e9141d4d70a355e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-7110

Malware in sbrugna...

7.5CVSS6.4AI score0.05744EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-7109

Malware in sbrugna...

6.8CVSS6.4AI score0.08274EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-5114

Malware in sbrugna...

6.8CVSS6.4AI score0.01009EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-5115

Malware in sbrugna...

6.8CVSS6.4AI score0.00867EPSS
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.1 views

Malicious code in @zalastax/nolb-_jaf (npm)

The package @zalastax/nolb-jaf was found to contain malicious code...

7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/21 10:32 p.m.4 views

CVE-2006-5130

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 url, 3 title, and 4 about parameters in a forum post. NOTE: the provenance of this information is unknown; the detai...

6.8CVSS5.8AI score0.00867EPSS
Exploits0References1
Rockylinux
Rockylinux
added 2021/05/18 6:28 a.m.8 views

rhel8 bug fix and enhancement update

An update is available for jmc, ee4j-parent, jaf, HdrHistogram, lz4-java, owasp-java-encoder, directory-maven-plugin, jmc-core. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

1.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

JAF CMS 4.0.0 RC2 - 'website' and 'main_dir' Parameters Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/28476/info JAF CMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.12 views

JAF CMS <= 4.0 RC1 Multiple Remote File Include Vulnerabilities

=========================================================================================== JAF CMS Remote file include website =========================================================================================== Script name : JAF CMS Version : 4.0...

7.3AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.20 views

jaf cms 4.0 rc2 - Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22665 Reference: http://www.htbridge.ch/advisory/shellcreatecommandexecutioninjafcms.html Product: JAF CMS Vendor: JAF CMS http://jaf-cms.sourceforge.net/ Vulnerable Version: 4.0 RC2 Vendor Notification: 21 October 2010 Vulnerability Type:...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.19 views

JAF CMS <= 4.0 RC1 (forum.php) Remote File Include Exploit

No description provided by source...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.45 views

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0777-1)

java-160-openjdk was updated to 1.12.5 bnc817157 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework...

10CVSS7.1AI score0.86252EPSS
Exploits15References21
securityvulns
securityvulns
added 2011/01/11 12:0 a.m.41 views

Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0_RC_2

Exploit Title: Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0RC2 Google Dork: Site engine powered by JAF-CMS Date: 9 January 2011 Author: Akastep Software Link: http://jaf-cms.sourceforge.net/ Version: JAF-CMS ver 4.0RC2 may be vuln exist in older versions too Tested on: FreeBSD...

6.1AI score
Exploits0
Packet Storm
Packet Storm
added 2011/01/10 12:0 a.m.25 views

JAF-CMS 4.0_RC_2 Cross Site Scripting

Exploit Title: Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0RC2 Google Dork: Site engine powered by JAF-CMS Date: 9 January 2011 Author: Akastep Software Link: http://jaf-cms.sourceforge.net/ Version: JAF-CMS ver 4.0RC2 may be vuln exist in older versions too Tested on: FreeBSD...

Exploits0
0day.today
0day.today
added 2010/11/15 12:0 a.m.21 views

JAF CMS 4.0 rc2 Mullti Vulnerability

Exploit for php platform in category web applications ==================================== JAF CMS 4.0 rc2 Mullti Vulnerability ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

7.1AI score
Exploits0
0day.today
0day.today
added 2010/11/15 12:0 a.m.38 views

JAF CMS 4.0 Upload Exploit

Exploit for php platform in category web applications ========================== JAF CMS 4.0 Upload Exploit ========================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2010/11/05 12:0 a.m.26 views

JAF CMS 4.0 RC2 Remote File Inclusion / Command Execution

===================================== Vulnerability ID: HTB22666 Reference: http://www.htbridge.ch/advisory/rfiinjafcms.html Product: JAF CMS Vendor: JAF CMS http://jaf-cms.sourceforge.net/ Vulnerable Version: 4.0 RC2 Vendor Notification: 21 October 2010 Vulnerability Type: Remote File Inclusion...

0.1AI score
Exploits0
OpenVAS
OpenVAS
added 2010/11/05 12:0 a.m.19 views

JAF CMS <= 4.0 RC2 Multiple Vulnerabilities

JAF CMS is prone to a shell command execution vulnerability and multiple remote file include vulnerabilities because the application fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...

7.8AI score
Exploits0References5
OpenVAS
OpenVAS
added 2010/11/05 12:0 a.m.18 views

JAF CMS Multiple Remote File Include and Remote Shell Command Execution Vulnerabilities

JAF CMS is prone to an shell-command-execution vulnerability and multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit the remote shell-command-execution issue to execute arbitrary shell commands in the context...

0.5AI score
Exploits0References6
Rows per page
Query Builder