791 matches found
MAL-2025-162453 Malicious code in nokire-arjuna40 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c373a0a78a5aa0afc351a840c8e83c7cdfda462afed5664f69e6687eb946dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Watch out for Walmart gift card scams
You’ve probably seen it before—a bright, urgent message claiming you’ve qualified for a $750 or $1000 Walmart gift card. All you have to do is answer a few questions. It looks harmless enough. But once you click, you find yourself in a maze of surveys, redirects, and "partner offers"—without ever...
CVE-2025-56450
Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injection via the leadid parameter in the /l2s/api/selfcareLeadHistory endpoint. A remote attacker can exploit this by sending a specially crafted POST request, resulting in the execution of arbitrary SQL queries. T...
📄 Log2Space Subscriber Management Software 1.1 SQL Injection
Log2Space Subscriber Management Software version 1.1 suffers from an unauthenticated remote SQL injection vulnerability. Author: Aditya Patil [email protected] Rohan Patil [email protected] CVE-2025-56450 Unauthenticated SQL Injection in Log2Space Subscriber Management Software...
CVE-2025-56450
Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injection via the leadid parameter in the /l2s/api/selfcareLeadHistory endpoint. A remote attacker can exploit this by sending a specially crafted POST request, resulting in the execution of arbitrary SQL queries. T...
CVE-2025-56450
CVE-2025-56450 affects Log2Space Subscriber Management Software 1.1. The vulnerability is an unauthenticated SQL injection in the /l2s/api/selfcareLeadHistory endpoint, exploitable via the lead_id parameter in a crafted POST request. The backend fails to sanitize input, enabling enumeration of da...
Spacecom Log2Space Subscriber Management Software 安全漏洞
Spacecom Log2Space Subscriber Management Software is a subscriber user management software from Spacecom India. A security vulnerability exists in Spacecom Log2Space Subscriber Management Software version 1.1, which stems from a failure to validate and clean the leadid parameter in the...
EUVD-2025-35180
Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injection via the leadid parameter in the /l2s/api/selfcareLeadHistory endpoint. A remote attacker can exploit this by sending a specially crafted POST request, resulting in the execution of arbitrary SQL queries. T...
WordPress ListingPro Lead Form plugin <= 1.0.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin ListingPro Lead Form versions = 1.0.2...
WordPress ListingPro Lead Form plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin ListingPro Lead Form versions = 1.0.2...
EUVD-2017-7402
Malware in sbrugna...
EUVD-2021-20523
Malware in sbrugna...
EUVD-2007-2819
Malware in sbrugna...
EUVD-2020-30791
Malware in sbrugna...
EUVD-2012-0955
Malware in sbrugna...
EUVD-2012-6167
Malware in sbrugna...
EUVD-2020-23362
Malware in sbrugna...
EUVD-2020-3862
Malware in sbrugna...