MAL-2025-28425 Malicious code in orange-shl-project (npm)

The package orange-shl-project was found to contain malicious code...

MAL-2025-28396 Malicious code in orange-echo-papa-bkgwv (npm)

The package orange-echo-papa-bkgwv was found to contain malicious code...

MAL-2025-28433 Malicious code in orange-uniform-hjny (npm)

The package orange-uniform-hjny was found to contain malicious code...

MAL-2025-28443 Malicious code in orange-yankee-mzux (npm)

The package orange-yankee-mzux was found to contain malicious code...

MAL-2025-21843 Malicious code in grape-orange-srxq (npm)

The package grape-orange-srxq was found to contain malicious code...

Malicious code in orange-xfv-project (npm)

The package orange-xfv-project was found to contain malicious code...

Malicious code in orange-bravo-rroh (npm)

The package orange-bravo-rroh was found to contain malicious code...

Malicious code in orange-kiwi-tjta (npm)

The package orange-kiwi-tjta was found to contain malicious code...

MAL-2025-25121 Malicious code in lemon-orange-rkmb (npm)

The package lemon-orange-rkmb was found to contain malicious code...

MAL-2025-38867 Malicious code in watermelon-orange-banana-bvwhi (npm)

The package watermelon-orange-banana-bvwhi was found to contain malicious code...

MAL-2025-28416 Malicious code in orange-mike-papa-iapwb (npm)

The package orange-mike-papa-iapwb was found to contain malicious code...

MAL-2025-30446 Malicious code in project-ped9e-orange (npm)

The package project-ped9e-orange was found to contain malicious code...

MAL-2025-28384 Malicious code in orange-banana-imbt (npm)

The package orange-banana-imbt was found to contain malicious code...

Malicious code in orange-msl-project (npm)

The package orange-msl-project was found to contain malicious code...

MAL-2025-28382 Malicious code in orange-91b-project (npm)

The package orange-91b-project was found to contain malicious code...

Malicious code in grape-orange-srxq (npm)

The package grape-orange-srxq was found to contain malicious code...

CVE-2023-50429

IzyBat Orange casiers before 202308031 allows getEnsemble.php ensemble SQL injection...

CVE-2023-22630

IzyBat Orange casiers before 202211021 allows SQL Injection via a getCasier.php?taille= URI...

CVE-2022-36161

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2021-24688

The Orange Form WordPress plugin through 1.0.1 does not have any authorisation and CSRF checks in all of its AJAX calls, for example the ordeletefiled one which is available to both unauthenticated and authenticated users could allow attackers to delete arbitrary posts.The AJAX calls performing...