Lucene search
+L

144 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/08 8:26 a.m.•37 views

Malicious code in na-rony-test-karem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd6a8602ce62a88124613cbe7eb85e19a1ae122a0ee98c71676fe4969359888f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.9AI score
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/05/01 2:14 p.m.•13 views

CVE-2026-31738

In the Linux kernel, the following vulnerability has been resolved: vxlan: validate ND option lengths in vxlannacreate vxlannacreate walks ND options according to option-provided lengths. A malformed option can make the parser advance beyond the computed option span or use a too-short source LLAD...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/02/27 7:44 p.m.•17 views

CVE-2026-1198

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in [email protected]...

8.6CVSS6AI score0.00292EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/26 12:30 p.m.•22 views

EUVD-2026-8848

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in [email protected]...

8.6CVSS5.8AI score0.00292EPSS
SaveExploits0References3
NVD
NVD
•added 2026/02/26 12:15 p.m.•19 views

CVE-2026-1198

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in [email protected]...

8.6CVSS0.00292EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/26 11:27 a.m.•11 views

CVE-2026-1198

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in [email protected]...

8.6CVSS5.8AI score0.00292EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/02/26 11:27 a.m.•13 views

CVE-2026-1198 SQL Injection in SIMPLE.ERP

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in [email protected]...

8.6CVSS5.8AI score0.00292EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/26 11:27 a.m.•38 views

CVE-2026-1198

SIMPLE.ERP is affected by a SQL Injection in the search feature in the "Obroty na kontach" window. The issue arises from insufficient input validation, allowing an authenticated attacker to craft a query that could be executed by the database. The CVE entry notes a high impact (CVSS v4.0 base sco...

8.6CVSS5.8AI score0.00292EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/26 12:00 a.m.•0 views

CVE-2026-1198: Improper Neutralization of Special Elements used in an SQL Command

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in [email protected]...

8.6CVSS5.8AI score0.00292EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/26 12:00 a.m.•28 views

PT-2026-22138

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in [email protected] u06...

8.6CVSS5.8AI score0.00292EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/12 7:18 p.m.•8 views

EUVD-2025-141789

Malicious code in goodan-ngasa-na npm...

6.6AI score
SaveExploits0
OSV
OSV
•added 2025/11/12 7:18 p.m.•7 views

MAL-2025-174506 Malicious code in goodan-ngasa-na (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ebfe7bbe4bc80b10be1af5c325f416efdd7043f5538c249977b217ea0970b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 7:18 p.m.•8 views

EUVD-2025-139475

Malicious code in nuilva-dakdre-na npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 7:18 p.m.•6 views

EUVD-2025-141408

Malicious code in hunimi-satihu-na npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 6:09 p.m.•8 views

EUVD-2025-144573

Malicious code in augis-pom9r-na npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 4:47 p.m.•6 views

EUVD-2025-147789

Malicious code in tehah-na-buta npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/12 4:47 p.m.•9 views

Malicious code in na-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd71b0c92a64c87ffb47dac0dd7ef1300e9a4bd457725536cd386e9c23a9e73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2018-9308

Malware in sbrugna...

7.5CVSS7.5AI score0.01978EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2019-3247

Malware in sbrugna...

9.8CVSS9.3AI score0.53095EPSS
SaveExploits0References5
Snyk
Snyk
•added 2025/09/16 5:28 a.m.•0 views

Malicious Package

Overview zarabotok-na-obmenakh-bitkoinakh-d7rqlq46s is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS6.8AI score
SaveExploits0References2
Rows per page
Query Builder