Lucene search
+L

7 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/20 3:51 p.m.10 views

Malicious code in megabank-worklist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f0a379223d486978f097d6f97b1d3a1fd307bb725be56c7baa2bc8ff72d297 The package megabank-worklist was found to contain malicious code. Source: ossf-package-analysis...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/04/20 3:51 p.m.17 views

MAL-2026-2955 Malicious code in megabank-worklist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f0a379223d486978f097d6f97b1d3a1fd307bb725be56c7baa2bc8ff72d297 The package megabank-worklist was found to contain malicious code. Source: ossf-package-analysis...

5.7AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-5851

Malware in sbrugna...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References4
NVD
NVD
added 2014/09/19 10:55 a.m.15 views

CVE-2014-5964

The MegaBank aka com.megabank.mobilebank application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
SaveExploits0References3
Prion
Prion
added 2014/09/19 10:55 a.m.8 views

Information disclosure

The MegaBank aka com.megabank.mobilebank application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2014/09/19 10:0 a.m.19 views

CVE-2014-5964

The MegaBank aka com.megabank.mobilebank application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00271EPSS
SaveExploits0References3
CVE
CVE
added 2014/09/19 10:0 a.m.40 views

CVE-2014-5964

CVE-2014-5964 affects the MegaBank Android app (com.megabank.mobilebank) version 2.0. The vulnerability is that the app does not verify X.509 SSL certificates, allowing MITM attackers to spoof servers and obtain sensitive information via crafted certificates. No remediation details are provided i...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder