Lucene search
+L

8 matches found

Snyk
Snyk
•added 2023/01/29 3:35 p.m.•6 views

Malicious Package

Overview seller-listing-service is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/11/09 5:34 p.m.•9 views

Malicious code in seller-listing-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8688aaa3e38ab3bfd132b1575c132517353f1b3406028da23c121d5dd37d0ab0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Vulnerability Lab
Vulnerability Lab
•added 2014/03/20 12:00 a.m.•25 views

FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability

Document Title: =============== FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1231 Release Date: ============= 2014-03-20 Vulnerability Laboratory ID VL-ID: ====================================...

SaveExploits0
NVD
NVD
•added 2010/01/06 10:00 p.m.•32 views

CVE-2009-4585

UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db.mdb...

5CVSS6.3AI score0.02588EPSS
SaveExploits2References5
Prion
Prion
•added 2010/01/06 10:00 p.m.•27 views

Improper access control

UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db.mdb...

5CVSS6.9AI score0.02588EPSS
SaveExploits2References5
CVE
CVE
•added 2010/01/06 9:33 p.m.•68 views

CVE-2009-4585

The CVE-2009-4585 entry concerns UranyumSoft Listing Service, where improper access control exposes sensitive data. The underlying issue is insufficient access restrictions at the web root, allowing an attacker to download the database file database/db.mdb via a direct HTTP request. The available...

5CVSS6.5AI score0.02588EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
•added 2010/01/06 9:33 p.m.•46 views

CVE-2009-4585

UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db.mdb...

6.3AI score0.02588EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/01/06 12:00 a.m.•5 views

CVE-2009-4585: Undefined Security Weakness

UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db.mdb...

5CVSS5.8AI score0.02588EPSS
SaveExploits2References2
Rows per page
Query Builder