HCL Unica Centralized Offer Management 安全漏洞

HCL Unica Centralized Offer Management is a module of HCL India responsible for the unified management and distribution of offers. A security vulnerability exists in HCL Unica Centralized Offer Management that stems from improper input validation and could lead to a server-side request forgery...

PT-2025-41703

Name of the Vulnerable Software and Affected Versions HCL Unica Centralized Offer Management affected versions not specified Description The software is susceptible to Insecure Direct Object References IDOR. This allows an attacker to bypass authorization controls and directly access resources...

HCL Unica Centralized Offer Management 安全漏洞

HCL Unica Centralized Offer Management is a module of HCL India responsible for the unified management and distribution of offers. A security vulnerability exists in HCL Unica Centralized Offer Management that originates from an insecure direct object reference that could lead to unauthorized...

EUVD-2020-6200

Malware in sbrugna...

EUVD-2024-23156

Malicious code in bioql PyPI...

EUVD-2023-45305

Malicious code in bioql PyPI...

PT-2025-39041

Name of the Vulnerable Software and Affected Versions WP Swings Upsell Order Bump Offer for WooCommerce versions through 3.0.7 Description The software contains a flaw related to improper input handling during web page creation, leading to a potential Stored Cross-Site Scripting XSS issue. This...

Watch out for the “We are hiring” remote online evaluator message scam

Looking at our team’s recent text messages, you’d think that remote online evaluators are in high demand right now. Several members of our team have received the almost exact same job offer scam texts. The content of the messages is almost identical, but there is a variation in background images...

Malicious code in offer-ocean-dead (npm)

The package offer-ocean-dead was found to contain malicious code...

MAL-2025-45420 Malicious code in offer-ocean-dead (npm)

The package offer-ocean-dead was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2020-14034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janusgetcodecfrompt in utils.c has a Buffer Overflow via long value in an SDP...

Malicious code in test-mlw2-offer-tusks-kibes-dusky (npm)

The package test-mlw2-offer-tusks-kibes-dusky was found to contain malicious code...

MAL-2025-35904 Malicious code in test-mlw2-offer-tusks-kibes-dusky (npm)

The package test-mlw2-offer-tusks-kibes-dusky was found to contain malicious code...

CVE-2024-25849

In the module "Make an offer" makeanoffer = 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer and MakeOffers::addUserOffer...

CVE-2020-14034

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janusgetcodecfrompt in utils.c has a Buffer Overflow via long value in an SDP Offer packet...

Malicious code in offer-ui-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-746 Malicious code in offer-ui-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-728 Malicious code in @wongapl/offer-selector (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-729 Malicious code in @wongapl/offer-ui-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

PT-2025-2136 · WordPress · Youzify

Name of the Vulnerable Software and Affected Versions: Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress versions up to, and including, 1.3.2 Description: The issue is related to unauthorized access due to a missing capability check on the youzify offe...