MAL-2025-35720 Malicious code in test-mlw2-lowes-disme-sauna-besot (npm)

The package test-mlw2-lowes-disme-sauna-besot was found to contain malicious code...

MAL-2025-35719 Malicious code in test-mlw2-lowes-debut-rotes-zabra (npm)

The package test-mlw2-lowes-debut-rotes-zabra was found to contain malicious code...

Malicious code in test-mlw2-lowes-disme-sauna-besot (npm)

The package test-mlw2-lowes-disme-sauna-besot was found to contain malicious code...

Malicious code in test-mlw2-lowes-debut-rotes-zabra (npm)

The package test-mlw2-lowes-debut-rotes-zabra was found to contain malicious code...

loweslandscaping.ca Improper Access Control vulnerability OBB-3789375

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lius.myloweslife.com Cross Site Scripting vulnerability OBB-3424831

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in @lowes/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59942f85fa0be57703f904716937512f1cd10a371d551296fe8445e0660783ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-401 Malicious code in @lowes/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59942f85fa0be57703f904716937512f1cd10a371d551296fe8445e0660783ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

lowes.com XSS vulnerability

Vulnerable URL: https://www.lowes.com/search?searchTerm=%27''';alert'confirmed xss'; Details: Description| Value ---|--- Patched:| Yes, at 28.09.2017 Latest check for patch:| 28.09.2017 08:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 740 VIP website status...