Lucene search
+L

234067 matches found

Snyk
Snyk
added 2026/05/31 9:00 p.m.13 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code linked to the "Miasma" supply chain attack targeting the @redhat-cloud-services npm namespace. A malicious actor compromised the publication pipeline and published versions containing malicious code that includes...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/31 9:00 p.m.14 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code linked to the "Miasma" supply chain attack targeting the @redhat-cloud-services npm namespace. A malicious actor compromised the publication pipeline and published versions containing malicious code that includes...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/31 9:00 p.m.18 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code linked to the "Miasma" supply chain attack targeting the @redhat-cloud-services npm namespace. A malicious actor compromised the publication pipeline and published versions containing malicious code that includes...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/31 9:00 p.m.17 views

Malicious Package

Overview @cloudplatform-single-spa/dataplatform-clusters is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/31 9:00 p.m.24 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code linked to the "Miasma" supply chain attack targeting the @redhat-cloud-services npm namespace. A malicious actor compromised the publication pipeline and published versions containing malicious code that includes...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/31 9:00 p.m.15 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code linked to the "Miasma" supply chain attack targeting the @redhat-cloud-services npm namespace. A malicious actor compromised the publication pipeline and published versions containing malicious code that includes...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/31 9:00 p.m.11 views

Malicious Package

Overview @debit-ib/mobile-debit-ib-additional-card-form is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/31 9:00 p.m.25 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code linked to the "Miasma" supply chain attack targeting the @redhat-cloud-services npm namespace. A malicious actor compromised the publication pipeline and published versions containing malicious code that includes...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/31 9:00 p.m.25 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code linked to the "Miasma" supply chain attack targeting the @redhat-cloud-services npm namespace. A malicious actor compromised the publication pipeline and published versions containing malicious code that includes...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/31 9:00 p.m.20 views

Malicious Package

Overview @cloudplatform-single-spa/certificate-manager is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/31 4:29 a.m.23 views

Malicious code in @challenger6/vm-pattern-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 396b490a90fc45f797d57bb02503489b3a924a18b927cabce392cad7f591c868 The OpenSSF Package Analysis project identified '@challenger6/vm-pattern-library' @ 99.0.0 npm as malicious. It is considered malicious because:...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/05/31 3:26 a.m.128 views

rm-oneview-poc

RM OneView — Proof of Concept A working POC of the Relationsh...

5.9AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/05/30 9:00 p.m.13 views

CVE-2026-10153

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

5.3CVSS4.4AI score0.0028EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/30 2:55 p.m.37 views

CVE-2018-25421

Open STA Manager 2.3 is affected by a path traversal vulnerability that lets authenticated users download arbitrary files by calling modules/backup/actions.php?op=getfile and traversing with ../ sequences to access sensitive system files. Affected component is the Open STA Manager implementation;...

7.1CVSS5.9AI score0.00334EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/05/30 2:55 p.m.49 views

CVE-2018-25421 Open STA Manager 2.3 Arbitrary File Download via Path Traversal

Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensiti...

7.1CVSS0.00334EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/05/30 2:55 p.m.19 views

EUVD-2018-21943

Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensiti...

7.1CVSS5.9AI score0.00334EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/30 2:55 p.m.14 views

CVE-2018-25421

Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensiti...

7.1CVSS5.9AI score0.00334EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/30 2:55 p.m.21 views

CVE-2018-25421 Open STA Manager 2.3 Arbitrary File Download via Path Traversal

Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensiti...

7.1CVSS5.9AI score0.00334EPSS
SaveExploits0References4
CBLMariner
CBLMariner
added 2026/05/30 3:37 a.m.12 views

CVE-2026-27136 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-27136 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

6.1CVSS5.8AI score0.00223EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/05/30 3:37 a.m.12 views

CVE-2026-39830 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39830 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

9.1CVSS5.8AI score0.00621EPSS
SaveExploits0
Rows per page
Query Builder