Malicious code in @zalastax/nolb-passe (npm)

The package @zalastax/nolb-passe was found to contain malicious code...

MAL-2025-43355 Malicious code in @zalastax/nolb-passe (npm)

The package @zalastax/nolb-passe was found to contain malicious code...

le-passe-temps.com Improper Access Control vulnerability OBB-3828061

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

passe-compose.de Cross Site Scripting vulnerability OBB-2355016

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

osCommerce 2.2rc2a Cross Site Request Forgery

==================================================== oscommerce 2.2rc2a Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

ezAPPAREL Cross Site Request Forgery

==================================================== ezAPPAREL Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

Boutique SudBox 1.2 Changer Login et Mot de Passe CSRF Vulnerability

Exploit for php platform in category web applications ==================================================================== Boutique SudBox 1.2 Changer Login et Mot de Passe CSRF Vulnerability ====================================================================...

Tribisur 'forum.php'/'cat_main.php' SQL注入漏洞

BUGTRAQ ID: 27149 CNCAN ID:CNCAN-2008010812 Tribisur是一款基于PHP的WEB应用程序。 Tribisur不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'forum.php'和'catmain.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Thomas PEREZ Tribisur 2.0 厂商解决方案 --------- 目前没有解决方案提供：...