Lucene search
+L

4 matches found

OSV
OSV
•added 2020/09/01 8:37 p.m.•21 views

GHSA-28XX-8J99-M32J Malicious Package in nginxbeautifier

Version 1.0.14 of nginxbeautifier contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.14 of this module is found installed yo...

9.8CVSS7.1AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/01 8:37 p.m.•43 views

Malicious Package in nginxbeautifier

Version 1.0.14 of nginxbeautifier contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.14 of this module is found installed yo...

3AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/01 12:00 a.m.•2 views

PT-2020-20954

Name of the Vulnerable Software and Affected Versions nginxbeautifier version 1.0.14 Description The issue concerns malicious code in a specific version of the software, which, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms...

9.8CVSS5.7AI score
SaveExploits0References2
nodejs
nodejs
•added 2018/05/15 11:52 p.m.•23 views

Malicious Package

Overview Version 1.0.14 of nginxbeautifier contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.14 of this module is found...

6.9AI score
SaveExploits0Affected Software1
Rows per page
Query Builder