3624 matches found
MAL-2025-44629 Malicious code in how-i-get-robux-codes-march-2023-dkzzdarg (npm)
The package how-i-get-robux-codes-march-2023-dkzzdarg was found to contain malicious code...
MAL-2025-44387 Malicious code in generate-unlimited-coin-master-spins-march-2023-dkdzdz (npm)
The package generate-unlimited-coin-master-spins-march-2023-dkdzdz was found to contain malicious code...
MAL-2025-37871 Malicious code in unlimited-fortnite-vbucks-march-2023-dkzszd (npm)
The package unlimited-fortnite-vbucks-march-2023-dkzszd was found to contain malicious code...
Malicious code in free-fortnite-vbucks-in-march-2023-updated-and-working-rekgek (npm)
The package free-fortnite-vbucks-in-march-2023-updated-and-working-rekgek was found to contain malicious code...
MAL-2025-20936 Malicious code in free-fortnite-vbucks-march-2023-updated-djkzez (npm)
The package free-fortnite-vbucks-march-2023-updated-djkzez was found to contain malicious code...
Malicious code in free-fortnite-vbucks-march-2023-updated-djkzez (npm)
The package free-fortnite-vbucks-march-2023-updated-djkzez was found to contain malicious code...
Malicious code in unlimited-fortnite-vbucks-march-2023-dkzszd (npm)
The package unlimited-fortnite-vbucks-march-2023-dkzszd was found to contain malicious code...
MAL-2025-20935 Malicious code in free-fortnite-vbucks-in-march-2023-updated-and-working-rekgek (npm)
The package free-fortnite-vbucks-in-march-2023-updated-and-working-rekgek was found to contain malicious code...
CVE-2025-32094: HTTP Request Smuggling Via OPTIONS + Obsolete Line Folding
In March 2025, Akamai received a bug bounty report identifying an HTTP Request Smuggling vulnerability that was quickly resolved for all customers...
CVE-2023-26490
mailcow is a dockerized email package, with multiple containers linked in one bridged network. The Sync Job feature - which can be made available to standard users by assigning them the necessary permission - suffers from a shell command injection. A malicious user can abuse this vulnerability to...
CVE-2023-27639
An issue was discovered in the tshirtecommerce aka Custom Product Designer component 2.1.4 for PrestaShop. An HTTP request can be forged with the POST parameter filename in the tshirtecommerce/ajax.php?type=svg endpoint, to allow a remote attacker to traverse directories on the system in order to...
CVE-2023-27638
An issue was discovered in the tshirtecommerce aka Custom Product Designer component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised tshirtecommercedesigncartid GET parameter in order to exploit an insecure parameter in the functions hookActionCartSave and...
CVE-2023-21460
Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...
CVE-2023-21459
Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault...
CVE-2022-25819
OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack memory...
CVE-2021-35062
A Shell Metacharacter Injection vulnerability in result.php in DRK Odenwaldkreis Testerfassung March-2021 allow an attacker with a valid token of a COVID-19 test result to execute shell commands with the permissions of the web server...
CVE-2010-1326
perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and...
CVE-2019-9978
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swpdebug=loadoptions swpurl parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro...