MAL-2025-27348 Malicious code in new-al-bum-av-ailable-37081-the-hard-way-ic2mb-rquzyw (npm)

The package new-al-bum-av-ailable-37081-the-hard-way-ic2mb-rquzyw was found to contain malicious code...

MAL-2025-27342 Malicious code in new-al-bum-av-ailable-15445-pieces-of-a-man-l0qbw-fjnero (npm)

The package new-al-bum-av-ailable-15445-pieces-of-a-man-l0qbw-fjnero was found to contain malicious code...

Friday Squid Blogging: Two-Man Giant Squid

The Brooklyn indie art-punk group, Two-Man Giant Squid, just released a new album. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered...

MAL-2024-9388 Malicious code in new-al-bum-av-ailable-21031-its-a-big-daddy-thing-funka-zsdlac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b46c361960608f6d3a9f73b38d5e9167514b06e760cb88b6144307a94420875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Lychee 安全漏洞

Lychee is a beautiful and easy to use photo management system from The Lychee Organisation open source. It is used to manage and share photos. A security vulnerability exists in Lychee version 3.1.6, which stems from a cross-site request forgery CSRF vulnerability. The vulnerability can be...

CVE-2024-25808

Cross-site Request Forgery CSRF vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create new album function...

JEESNS stored cross-site scripting vulnerability (CNVD-2021-74059)

JEESNS is a social management system developed on JAVA's enterprise-level platform. A stored cross-site scripting vulnerability exists in the /member/picture/album component in JEESNS version 1.4.2. The vulnerability can be exploited to execute arbitrary web script or HTML via a specially crafted...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the /member/picture/album component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the new album tab...

Jeesns 跨站脚本漏洞

JEESNS is a social management system developed on JAVA's enterprise-level platform. A stored cross-site scripting vulnerability exists in the /member/picture/album component in JEESNS version 1.4.2. The vulnerability can be exploited to execute arbitrary web script or HTML via a specially crafted...