472 matches found
EUVD-2024-22148
Malicious code in bioql PyPI...
EUVD-2021-30701
Malicious code in bioql PyPI...
EUVD-2022-41754
Malicious code in bioql PyPI...
EUVD-2023-41180
Malicious code in bioql PyPI...
EUVD-2024-39076
Malicious code in bioql PyPI...
EUVD-2025-22396
Malicious code in bioql PyPI...
EUVD-2025-6370
Malicious code in bioql PyPI...
Minecraft RCON Terminal security vulnerability
Minecraft RCON Terminal is an extension for Visual Studio Code by Jake T Cooper Personal Developer. A security vulnerability exists in Minecraft RCON Terminal version 2.0.6 and earlier, which stems from the use of the VS Code Configuration API to store passwords in plaintext...
PT-2025-40604
Name of the Vulnerable Software and Affected Versions Minecraft RCON Terminal versions 0.1.0 through 2.0.6 Description The Minecraft RCON Terminal VS Code extension improperly stores passwords in plaintext within the settings.json file using VS Code's configuration API. This affects versions used...
CVE-2025-61680: Plaintext Storage of a Password
Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4J-RCE-Proof-Of-Concept CVE-2021-44228 This is a proof of concept of the log4j rce. Here are some links for the CVE-2021-44228: - https://www.lunasec.io/docs/blog/log4j-zero-day - https://github.com/advisories/GHSA-jfh8-c2jp-5v3q - https://github.com/apache/logging-log4j2/pull/608 -...
PT-2025-33881 · Undefined · Undefined
ParsedReport CompletenessMedium 19-08-2025 The emergence of MountBot, which hides its processes https://blog.nicter.jp/2025/08/mountbot 2025aug/ Report completeness: Medium Threats: Mountbot Rapperbot Socat tool Victims: Iot devices, Online game servers, Minecraft servers, Asus wifi routers,...
CVE-2025-54117: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting XSS vulnerability in NamelessMC before 2.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the dashboard text editor component. This vulnerability is fixed ...
CVE-2025-54421: Improper Neutralization of Input During Web Page Generation
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting XSS vulnerability in NamelessMC before 2.2.4 allows remote authenticated attackers to inject arbitrary web script or HTML via the defaultkeywords crafted parameter. This vulnerability is fixe...
Malicious code in minecraft-codes130 (npm)
The package minecraft-codes130 was found to contain malicious code...
Malicious code in minecraft-codes364 (npm)
The package minecraft-codes364 was found to contain malicious code...
MAL-2025-26407 Malicious code in minecraft-codes767 (npm)
The package minecraft-codes767 was found to contain malicious code...
MAL-2025-26403 Malicious code in minecraft-codes130 (npm)
The package minecraft-codes130 was found to contain malicious code...