Lucene search
+L

43078 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/08 1:1 a.m.10 views

Malicious code in week-4-node-modularization (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0183bf3fb4823612b5a0668f2fc3e58fe3de5ee161fa9acd80244e0400dc40b9 The package week-4-node-modularization was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/08 1:1 a.m.10 views

Malicious code in svelte-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822b182580c298051b9c1f8bb1e807bdb6c780fce64845002feebe37eddd0fad The package svelte-monorepo was found to contain malicious code. Source: ghsa-malware 1f5c5e96c4223fbe3046df01f3cda3aa9b821888050b45d82e92688609a7284...

6.9AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/08 12:51 a.m.37 views

CVE-2026-21879 Kanboard vulnerable to Open Redirect via protocol-relative URLs

Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below are vulnerable to an Open Redirect attack that allows malicious actors to redirect authenticated users to attacker-controlled websites. By crafting URLs such as //evil.com, attackers can bypass the...

4.7CVSS0.00265EPSS
SaveExploits2References3
EUVD
EUVD
added 2026/01/08 12:51 a.m.9 views

EUVD-2026-1665

Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below are vulnerable to an Open Redirect attack that allows malicious actors to redirect authenticated users to attacker-controlled websites. By crafting URLs such as //evil.com, attackers can bypass the...

4.7CVSS6.1AI score0.00265EPSS
SaveExploits2References3
Debian CVE
Debian CVE
added 2026/01/08 12:51 a.m.7 views

CVE-2026-21879

Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below are vulnerable to an Open Redirect attack that allows malicious actors to redirect authenticated users to attacker-controlled websites. By crafting URLs such as //evil.com, attackers can bypass the...

6.1CVSS5.3AI score0.00265EPSS
SaveExploits2
CVE
CVE
added 2026/01/08 12:51 a.m.32 views

CVE-2026-21879

Kanboard (versions ≤ 1.2.48) is affected by an Open Redirect vulnerability where protocol-relative URLs like //evil.com bypass FILTER_VALIDATE_URL, enabling attackers to redirect authenticated users to attacker-controlled sites. This could facilitate phishing, credential theft, or malware distrib...

6.1CVSS6.2AI score0.00265EPSS
SaveExploits2References3Affected Software1
Packet Storm News
Packet Storm News
added 2026/01/08 12:0 a.m.7 views

AI-Powered Algorithms for the Prevention and Detection of Computer Malware Infections

The rise in frequency and complexity of malware attacks are viewed as a major threat to modern digital infrastructure, which means that traditional signature-based detection methods are becoming less effective. As cyber threats continue to evolve, there is a growing need for intelligent systems t...

6.7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/07 11:51 p.m.10 views

Malicious code in aws-target-mediator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebc5003f75ac973cedd53d212f4d9b3dc016b36e43b24ca0a10e77e485b9141 The package aws-target-mediator was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/07 11:51 p.m.12 views

Malicious code in spark-ar-jest-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67c582fb00bd7fd05adc5f9680fed203dd43086ab6efbcbec369bb386eaeb6f The package spark-ar-jest-mocks was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2026/01/07 11:51 p.m.7 views

MAL-2026-140 Malicious code in rt-live-hero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b963cc4f9c61717fb440dbd17f3897337fd7aa94a3d077bcd8307c2faf109c57 The package rt-live-hero was found to contain malicious code. Source: ghsa-malware f56b0f0c83fe7af0849099067abaa56333d2eadffeb3f8152244c74b40a706d6 A...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2026/01/07 11:51 p.m.7 views

MAL-2026-131 Malicious code in awsm-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a8778a330765a0a4f5b15960d7bba1cf4ea76946cd4395eb239af31c497330 The package awsm-core was found to contain malicious code. Source: ghsa-malware ba13f4a6fbc556808377c1e17e991b77feb5d2d08af58861be6460732cfc3d9e Any...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2026/01/07 11:51 p.m.5 views

MAL-2026-141 Malicious code in rt-long-form-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aafc418ec6a49447f89597e76416b14a45ffa82d65fb393dc3bb91d1fca38ac The package rt-long-form-content was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2026/01/07 11:51 p.m.9 views

MAL-2026-130 Malicious code in awsm-acslibs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75908418c77ed1eed9d51f2880e20a9608a49fe6e21582715517f0fa4044d349 The package awsm-acslibs was found to contain malicious code. Source: ghsa-malware 566e39645aaa10c8e2d212725d48fa1023624b811c5d98b6c4cf6354d1beba95 A...

6.8AI score
SaveExploits0References1
NVD
NVD
added 2026/01/07 5:16 p.m.17 views

CVE-2025-66837

A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware...

6.8CVSS0.00257EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2026/01/07 5:9 p.m.15 views

Black Cat Behind SEO Poisoning Malware Campaign Targeting Popular Software Searches

A cybercrime gang known as Black Cat has been attributed to a search engine optimization SEO poisoning campaign that employs fraudulent sites advertising popular software to trick users into downloading a backdoor capable of stealing sensitive data. According to a report published by the National...

6.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/07 9:28 a.m.15 views

CVE-2019-12505

Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP1001 v1.3C is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

8.8CVSS7.4AI score0.01333EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:27 a.m.10 views

CVE-2019-12506

Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remote R-R0010 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target...

8.8CVSS7.5AI score0.01347EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:22 a.m.14 views

CVE-2006-3830

The Languages selection in the admin interface in Kailash Nadh boastMachine formerly bMachine 3.1 and earlier allows remote authenticated administrators to upload files with arbitrary extensions to the bmc/Inc/Lang directory. NOTE: because the uploaded files cannot be accessed through HTTP, this...

4CVSS6.6AI score0.00812EPSS
SaveExploits1References1
OSV
OSV
added 2026/01/07 6:49 a.m.6 views

MAL-2026-116 Malicious code in jh5o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec5d7cca5e58324cc7dea4623e12ad7bfad0a9ac6812a49373017a13c195a5b The package jh5o was found to contain malicious code. Source: ghsa-malware 01eaba01805549a7aa5e246fd04674dd562885c5fa3e0d4a6d30e1595e3fe945 Any...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2026/01/07 6:49 a.m.5 views

MAL-2026-123 Malicious code in wifzap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be4876590c997a82e63ea5e8f107a5045d475a221e64ce755c478c2e10270d9 The package wifzap was found to contain malicious code. Source: ghsa-malware 1e5ec30d2613d271e1254cf809673eeac52f74766ce48c5e8c59f291e2c37b9f Any...

6.8AI score
SaveExploits0References1
Rows per page
Query Builder