Lucene search
K

9 matches found

EUVD
EUVD
added 2026/04/27 2:0 a.m.4 views

EUVD-2026-25759

A vulnerability was identified in itsourcecode Courier Management System 1.0. The affected element is an unknown function of the file /editparcel.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be...

7.5CVSS5.4AI score0.00043EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/09/29 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-56648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development...

6.5CVSS5.5AI score0.00013EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2025/09/17 9:30 p.m.6 views

Parcel has an Origin Validation Error vulnerability

parcel versions 1.6.1 and above have an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them. Version 2.16.4 supports a --no-cors option which disables CORS...

6.5CVSS5.9AI score0.00013EPSS
Exploits1References8Affected Software1
OSV
OSV
added 2025/09/17 9:30 p.m.2 views

GHSA-QM9P-F9J5-W83W Parcel has an Origin Validation Error vulnerability

parcel versions 1.6.1 and above have an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them. Version 2.16.4 supports a --no-cors option which disables CORS...

6.5CVSS5.9AI score0.00013EPSS
Exploits1References8
NVD
NVD
added 2025/09/17 7:15 p.m.2 views

CVE-2025-56648

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them...

6.5CVSS0.00013EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/09/17 12:0 a.m.1 views

parcel 安全漏洞

parcel is a zero-configuration build tool for the web from Parcel open source. A security vulnerability exists in parcel 2.0.0-alpha and earlier versions, which stems from a source validation error that allows a malicious website to send XMLHTTPRequests to the development server and read the...

6.5CVSS6.6AI score0.00013EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/09/17 12:0 a.m.2 views

PT-2025-38252

Name of the Vulnerable Software and Affected Versions parcel versions 2.0.0-alpha and earlier Description A security issue exists in Parcel that allows malicious websites to send XMLHTTPRequests to the application's development server and read the response, potentially leading to source code thef...

6.5CVSS6.4AI score0.00013EPSS
Exploits1References15
Vulnrichment
Vulnrichment
added 2025/09/17 12:0 a.m.1 views

CVE-2025-56648

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them...

6.8AI score0.00013EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/08/06 12:0 a.m.4 views

PT-2025-32083 · Parcel · Parcel

Name of the Vulnerable Software and Affected Versions: Parcel affected versions not specified Description: A ParcelMismatch vulnerability exists in attribute deserialization. Successful exploitation of this issue may cause exceptions in the display of the playback control screen. Recommendations:...

5.5CVSS6.3AI score0.00164EPSS
Exploits0References2
Rows per page
Query Builder