MAL-2025-27197 Malicious code in nectar-caravan-kim477-project (npm)

The package nectar-caravan-kim477-project was found to contain malicious code...

Malicious code in nectar-albatross-rgc368-project (npm)

The package nectar-albatross-rgc368-project was found to contain malicious code...

MAL-2025-27199 Malicious code in nectar-glisten-nom856-project (npm)

The package nectar-glisten-nom856-project was found to contain malicious code...

MAL-2025-27198 Malicious code in nectar-desert-yka347-project (npm)

The package nectar-desert-yka347-project was found to contain malicious code...

MAL-2025-27892 Malicious code in nugget-nectar-ayv886-project (npm)

The package nugget-nectar-ayv886-project was found to contain malicious code...

MAL-2025-23641 Malicious code in jasmine-nectar-dtg648-project (npm)

The package jasmine-nectar-dtg648-project was found to contain malicious code...

MAL-2025-31077 Malicious code in quail-nectar-bar876-project (npm)

The package quail-nectar-bar876-project was found to contain malicious code...

PT-2024-27890 · WordPress · Salient Core

Name of the Vulnerable Software and Affected Versions: Salient Core plugin for WordPress versions up to, and including, 2.0.7 Description: The Salient Core plugin for WordPress is vulnerable to Local File Inclusion via the nectar icon shortcode icon linea attribute. This allows authenticated...

CVE-2023-48749

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme nectar Salient Core allows Stored XSS.This issue affects Salient Core: from n/a through 2.0.2...

CVE-2023-48748

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme nectar Salient Core allows Reflected XSS.This issue affects Salient Core: from n/a through 2.0.2...

CVE-2023-48749

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme nectar Salient Core allows Stored XSS.This issue affects Salient Core: from n/a through 2.0.2...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme nectar Salient Core allows Stored XSS.This issue affects Salient Core: from n/a through 2.0.2...

CVE-2023-48748

CVE-2023-48748 is a Cross-Site Scripting (XSS) vulnerability in WordPress plugin Salient Core (Theme Salient Core). Affected versions are

CVE-2023-48749

CVE-2023-48749: Salient Core for WordPress is affected by an Stored XSS due to improper input neutralization in web page generation. The vulnerability applies to Salient Core versions

CVE-2018-13586

The mintToken function of a smart contract implementation for Nectar NCTR, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for Nectar NCTR, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13586

CVE-2018-13586 affects Nectar (NCTR) token: the mintToken function in the smart contract has an integer overflow that allows the contract owner to set any user’s balance to an arbitrary value. This is documented in NVD/Nectar CVE entries. Exploitation status and concrete remediation steps are not...

CVE-2018-13586

The mintToken function of a smart contract implementation for Nectar NCTR, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13209

The sell function of a smart contract implementation for Nectar NCTR, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for Nectar NCTR, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...