Lucene search
+L

1323 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/02/20 4:59 p.m.14 views

Malicious code in crypto-locale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e346cfc58b0d84fb5b56985729f7ec92a226ef106b0ab10f299e65a62028834d The package crypto-locale was found to contain malicious code. Source: ghsa-malware 00686734db6a3f5477c1047f779749296dddb0c7eab5294000e13ed7b194c74d...

5.6AI score
SaveExploits0References1
Snyk
Snyk
added 2026/02/20 4:59 p.m.10 views

Malicious Package

Overview locale-loader-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.6AI score
SaveExploits0References2
Packet Storm
Packet Storm
added 2026/02/17 12:00 a.m.284 views

📄 Pterodactyl Panel Remote Code Execution

This Metasploit module exploits a remote code execution vulnerability in Pterodactyl Panel versions before 1.11.11. The vulnerability allows an attacker to write a malicious PHP file via the locale functionality and then execute it to gain a reverse shell...

10CVSS6.5AI score0.54677EPSS
SaveExploits30
GithubExploit
GithubExploit
added 2026/02/16 12:58 p.m.390 views

Exploit for CVE-2025-49132

CVE-2025-49132 - Pterodactyl Panel Exploit ⚠️ Disclaimer...

10CVSS6.9AI score0.54677EPSS
SaveExploits30
GithubExploit
GithubExploit
added 2026/02/11 11:18 a.m.181 views

Exploit for CVE-2025-49132

██████╗██╗ ██╗██████╗ ███████╗██████╗ ██████╗ █████╗ ███...

10CVSS6.4AI score0.54677EPSS
SaveExploits30
GithubExploit
GithubExploit
added 2026/02/08 12:28 p.m.653 views

Exploit for CVE-2025-49132

CVE-2025-49132 - Pterodactyl Panel Unauthenticated RCE...

10CVSS5.7AI score0.54677EPSS
SaveExploits30
Snyk
Snyk
added 2026/02/06 11:10 a.m.7 views

Malicious Package

Overview @rsgweb/locale-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/02/06 3:46 a.m.15 views

Malicious code in @rsgweb/locale-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1882e2ffa769f9383127f2bfc582935b3bb1145e172eb6941a0276989a983f The package @rsgweb/locale-tools was found to contain malicious code. Source: ghsa-malware...

5.4AI score
SaveExploits0References1
OSV
OSV
added 2026/02/06 3:46 a.m.8 views

MAL-2026-786 Malicious code in @rsgweb/locale-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1882e2ffa769f9383127f2bfc582935b3bb1145e172eb6941a0276989a983f The package @rsgweb/locale-tools was found to contain malicious code. Source: ghsa-malware...

5.6AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:00 a.m.9 views

Atlassian Jira Service Management Data Center and Server 11.2.0 < 11.2.1 (JSDSERVER-16458)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16458 advisory. - UNSUPPORTED WHEN ASSIGNED The value set as the DefaultLocaleResolver.LOCALEKEY attribute on the...

7.5CVSS5.5AI score0.01345EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/02/02 7:12 a.m.17 views

Security Bulletin: IBM OpenPages for Cloud Pak for Data is Vulnerable to Multiple Spring Framework Vulnerabilities (CVE-2024-38820,CVE-2025-22233)

Summary Spring MVC controller vulnerable to a DoS attack and DataBinder Case Sensitive Match Exception. These vulnerabilities were remediated. Vulnerability Details CVEID:CVE-2024-38820 DESCRIPTION: The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However,...

5.3CVSS5.4AI score0.05666EPSS
SaveExploits2Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.7 views

MiracleLinux 7 : libX11-1.6.7-3.el7 (AXSA:2020-865:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-865:01 advisory. libX11: integer overflow leads to double free in locale handling CVE-2020-14363 Tenable has extracted the preceding description block directly from the...

7.8CVSS7.8AI score0.00575EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/19 12:00 a.m.10 views

MiracleLinux 4 : perl-5.10.1-130.AXS4 (AXSA:2013-320:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-320:01 advisory. Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is...

7.5CVSS8.2AI score0.63488EPSS
SaveExploits14References5
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.7 views

MiracleLinux 3 : perl-5.8.8-40.0.1.AXS3 (AXSA:2013-340:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-340:01 advisory. Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is...

7.5CVSS8.3AI score0.63488EPSS
SaveExploits14References5
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.8 views

MiracleLinux 4 : glibc-2.12-1.132.AXS4.4 (AXSA:2014-509:05)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-509:05 advisory. Description : The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory...

7.5CVSS8.5AI score0.18099EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:00 a.m.8 views

MiracleLinux 4 : libvirt-0.9.10-21.5.0.1.AXS4 (AXSA:2012-975:04)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-975:04 advisory. Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the...

5CVSS6.7AI score0.03718EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:00 a.m.7 views

MiracleLinux 4 : glibc-2.12-1.47.AXS4.5 (AXSA:2012-123:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-123:02 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as t...

6.8CVSS8.4AI score0.08073EPSS
SaveExploits2References3
NVD
NVD
added 2026/01/13 11:15 p.m.12 views

CVE-2021-47749

YouPHPTube = 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' parameter in GET requests. Attackers can exploit the path traversal flaw in locale/function.php to include and view PHP files outside the...

8.7CVSS0.01855EPSS
SaveExploits1References3
OSV
OSV
added 2026/01/13 11:15 p.m.10 views

CVE-2021-47749

YouPHPTube = 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' parameter in GET requests. Attackers can exploit the path traversal flaw in locale/function.php to include and view PHP files outside the...

8.7CVSS5.7AI score
SaveExploits0References3
CVE
CVE
added 2026/01/13 10:51 p.m.31 views

CVE-2021-47749

YouPHPTube

8.7CVSS6.5AI score0.01855EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder