415 matches found
MAL-2025-20973 Malicious code in frontend-redis-orogeny-karma (npm)
The package frontend-redis-orogeny-karma was found to contain malicious code...
Malicious code in frontend-redis-orogeny-karma (npm)
The package frontend-redis-orogeny-karma was found to contain malicious code...
MAL-2025-21335 Malicious code in geochemistry-seismology-higgs-karma (npm)
The package geochemistry-seismology-higgs-karma was found to contain malicious code...
Malicious code in accretion-foundation-karma-paleoceanography (npm)
The package accretion-foundation-karma-paleoceanography was found to contain malicious code...
MAL-2025-24326 Malicious code in karma-puida-4cu7u-quiver-project (npm)
The package karma-puida-4cu7u-quiver-project was found to contain malicious code...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: authservice, opentelemetry-collector, swagger, falco-exporter, sftpgo-plugin-kms, flyte, aws-node-termination-handler-fips, db-operator, spegel-fips, kbld-fips, openbao-fips, kube-logging-operator, kube-oidc-proxy, prometheus-postgres-exporter, go-md2man, gosu,...
Malicious code in karma-jasmine-sinon (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6532 Malicious code in karma-jasmine-sinon (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4840 Malicious code in karma-spec-filter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3503f8ac76bf4e0ba36fc7cbaab721a6285fe53ff821cd82ca0f4e417308eb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in karma-spec-filter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3503f8ac76bf4e0ba36fc7cbaab721a6285fe53ff821cd82ca0f4e417308eb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-37602
Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...
CVE-2011-4090
Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation...
MAL-2025-130 Malicious code in karma-fest-preprocessor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fc59d44987dfafc3d0226a2629d1aa8294664f22936a59406d8e77b6695b2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in karma-fest-preprocessor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fc59d44987dfafc3d0226a2629d1aa8294664f22936a59406d8e77b6695b2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-42618
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /module.php?module=karma...
Kliqqi CMS 安全漏洞
Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . A cross-site request forgery vulnerability exists in Kliqqi CMS version v2.0.2, which originates from /module.php?module=karma does not adequately verify that the request comes from a trusted user, and can be exploited by an...
PT-2024-30069 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered, affecting the software through the "module.php?module=karma" endpoint. This allows for malicious requests to be made on behalf of the user...
CVE-2024-42618
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /module.php?module=karma...
CVE-2024-42618
CVE-2024-42618 affects Pligg CMS (also referred to as Kliqqi CMS) v2.0.2. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be triggered via the endpoint /module.php?module=karma, allowing an attacker to forge a request on behalf of a logged-in user. No explicit exploit details ar...