Lucene search
K

12 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/14 5:22 p.m.5 views

Malicious code in minemeld-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dfe7b8c00b3748b3fe38ffdf3bd69558abb58091ee3347d47003929976ceb457 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.3AI score
Exploits0References1
OSV
OSV
added 2025/11/14 5:22 p.m.1 views

MAL-2025-191791 Malicious code in minemeld-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dfe7b8c00b3748b3fe38ffdf3bd69558abb58091ee3347d47003929976ceb457 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.2AI score
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-10135

Malware in sbrugna...

6.1CVSS6.3AI score0.0019EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 8:12 a.m.6 views

CVE-2019-1578

Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser...

6.1CVSS6.8AI score0.0019EPSS
Exploits0References1
CNVD
CNVD
added 2019/07/02 12:0 a.m.1 views

Palo Alto Networks MineMeld Cross-Site Scripting Vulnerability

Palo Alto Networks MineMeld is a threat intelligence processing tool from Palo Alto Networks, USA. The product extracts metrics from multiple sources and compiles the metrics into multiple formats compatible with AutoFocus, PaloAltoNetworks Next-Generation Firewall, and other Security and...

6.1CVSS6.4AI score0.0019EPSS
Exploits0References1
NVD
NVD
added 2019/07/01 7:15 p.m.17 views

CVE-2019-1578

Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser...

6.1CVSS6.3AI score0.0019EPSS
Exploits0References2
OSV
OSV
added 2019/07/01 7:15 p.m.1 views

CVE-2019-1578

Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser...

6.1CVSS6.6AI score0.0019EPSS
Exploits0References2
Prion
Prion
added 2019/07/01 7:15 p.m.16 views

Cross site scripting

Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser...

4.3CVSS6.2AI score0.0019EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/07/01 6:31 p.m.12 views

CVE-2019-1578

Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser...

6.2AI score0.0019EPSS
Exploits0References2
CVE
CVE
added 2019/07/01 6:31 p.m.77 views

CVE-2019-1578

CVE-2019-1578 is a cross-site scripting (XSS) vulnerability in Palo Alto Networks MineMeld up to version 0.9.60. The issue arises from lack of proper input validation in the web UI, allowing an authenticated MineMeld admin to be convinced to input malicious data that could execute arbitrary JavaS...

6.1CVSS6.2AI score0.0019EPSS
Exploits0References2Affected Software1
Palo Alto Networks
Palo Alto Networks
added 2019/06/27 11:50 p.m.199 views

Cross Site Scripting (XSS) in MineMeld

A reflected cross-site scripting XSS vulnerability exists in Palo Alto Networks MineMeld. Ref CVE-2019-1578 A remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser. This issue...

2.8AI score0.0019EPSS
Exploits0References1Affected Software1
Palo Alto Networks
Palo Alto Networks
added 2019/06/27 11:50 p.m.12 views

Cross Site Scripting (XSS) in MineMeld

A reflected cross-site scripting XSS vulnerability exists in Palo Alto Networks MineMeld. Ref CVE-2019-1578 A remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser. This issue...

6.1CVSS6.1AI score0.0019EPSS
Exploits0References1
Rows per page
Query Builder