47 matches found
IntelligentProcessLifecycle
IntelligentProcessLifecycle The Intelligent Process Lifecycle of Active Cyber Defenders Description This github hosts the poster related files of false positive and error categories in security operation services. The goal is to define an open source reporting standard for Security Operation Cent...
Malicious code in kpi-panel (npm)
The package kpi-panel was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in business-kpi-manager (PyPI)
Source: ossf-package-analysis 273b321944297087263b5b5821cab2c1f54c8c91e75998fe8c8bca26b8ffb0b7 The OpenSSF Package Analysis project identified 'business-kpi-manager' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...
bubbletea-py (0.0.2), streamlit-kpi-metric (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-10804 via streamlit (0.86.0)
streamlit PYPI version 0.86.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py 0.0.2 - streamlit-kpi-metric =0.1.0, =0.1.1 Source cves: CVE-2026-10804 Source advisory: OSV:GHSA-VQWP-45WM-R9R5...
bubbletea-py (0.0.2), streamlit-kpi-metric (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-10804 via streamlit (0.86.0)
streamlit PYPI version 0.86.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py 0.0.2 - streamlit-kpi-metric =0.1.0, =0.1.1 Source cves: CVE-2026-10804 Source advisory: OSV:PYSEC-2026-212...
bubbletea-py (0.0.2), streamlit-kpi-metric (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-33682 via streamlit (0.86.0)
streamlit PYPI version 0.86.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py 0.0.2 - streamlit-kpi-metric =0.1.0, =0.1.1 Source cves: CVE-2026-33682 Source advisory: OSV:PYSEC-2026-2285...
bubbletea-py (0.0.2), streamlit-kpi-metric (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-33682 via streamlit (0.86.0)
streamlit PYPI version 0.86.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py 0.0.2 - streamlit-kpi-metric =0.1.0, =0.1.1 Source cves: CVE-2026-33682 Source advisory: OSV:GHSA-7P48-42J8-8846...
Malware in kpi-media-metrics
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in kpi-media-metrics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3bb2b9c205d4f8a38e5c5272fb0c10f8d0d0f12809f2e0a7b3d95f1ed5a17d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-33634
Malicious code in kpi-media-metrics npm...
MAL-2025-48244 Malicious code in kpi-media-metrics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3bb2b9c205d4f8a38e5c5272fb0c10f8d0d0f12809f2e0a7b3d95f1ed5a17d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2020-3591
Malware in sbrugna...
EUVD-2020-3590
Malware in sbrugna...
EUVD-2020-3627
Malware in sbrugna...
EUVD-2022-46381
Malicious code in bioql PyPI...
Malicious code in kpi-panel (npm)
The package kpi-panel was found to contain malicious code...
CVE-2022-43342
A stored cross-site scripting XSS vulnerability in the Add function of Eramba GRC Software c2.8.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the KPI Title text field...
CVE-2025-3767 SQL Injection in Centreon BAM boolean KPI listing
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon BAM Boolean KPi Listing modules allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1,...
CVE-2025-3767: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Centreon BAM Boolean KPi Listing modules allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1,...