100 matches found
Malicious code in protestant-ivory-magpie (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e03a2de8ed1f556ccee4cb08c59b68d0fb6eb1c62b52c82d394f4aa27b911a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51540
Malicious code in thin-fuchsia-magpie npm...
MAL-2025-71093 Malicious code in theoretical-gray-magpie (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd6588c7e3301e7495a6d472a4a77a5526984265ea3846667cb9a1fe30b7ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-57358
Malicious code in shiveringmagpiez3n npm...
EUVD-2020-17956
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2021-28941
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Because of no validation on a curl command in MagpieRSS 0.72 in the /extlib/Snoopy.class.inc file, when you send a request to the /scripts/magpiedebug.php or...
CVE-2020-25268
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data...
MAL-2025-2685 Malicious code in magpie-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4776d07e83074f4b9eb4c3b26583b7a99bc123558f5d6154e653ac27c5506017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in magpie-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4776d07e83074f4b9eb4c3b26583b7a99bc123558f5d6154e653ac27c5506017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in thin-bronze-magpie (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9884 Malicious code in thin-bronze-magpie (npm)
--- -= Per source details. Do not edit below this line.=-...
SUSE CVE-2013-4214
rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIECACHEON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpiecache...
UBUNTU-CVE-2021-28940
Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpiedebug.php and /scripts/magpiesimple.php page that if you send a specific https url in the RS...
ILIAS Remote Code Execution Vulnerability
ILIAS is a powerful open source learning management system for developing and implementing web-based e-learning. A remote code execution vulnerability exists in ILIAS 6.4. The vulnerability stems from a parameter validation error on Magpie RSS data. An attacker can exploit this vulnerability to...
CVE-2020-25268
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data...
CVE-2020-25268
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data...
Remote code execution
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data...
CVE-2020-25268
ILIAS 6.4 is vulnerable to Remote Code Execution via the external news feed due to incorrect parameter sanitization of Magpie RSS data. The issue affects the Magpie RSS data parsing path, enabling an attacker to execute code remotely. CVSS details indicate a high impact (C, I, A high) with networ...
CVE-2020-25268
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data...
WordPress WP-Planet Cross-Site Scripting Vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WP-Planet is one of the plugins used in it. WordPress WP-Planet 0.1 and earlier versions of the rss.class/scripts/magpiedebug.php...