231 matches found
CVE-2026-1989
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
EUVD-2026-42553
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-1989
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-1989
Technical details of CVE-2026-1989 are not publicly available in the provided documents; monitor for updates.
CVE-2026-1989 IDOR in PAVO Inc.'s PAVO Pay
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
EUVD-2025-177735
Malicious code in multiverse-pavo-dependencies-enif npm...
EUVD-2025-177296
Malicious code in pavo-auth-sedna-polaris npm...
EUVD-2025-177291
Malicious code in pavo-xenon-markdownlint-enceladus npm...
EUVD-2025-178874
Malicious code in fomalhaut-venus-pavo-update npm...
EUVD-2025-176629
Malicious code in rimraf-middleware-mysql-pavo npm...
EUVD-2025-176334
Malicious code in slidev-supernova-pavo-zephyr npm...
Malicious code in pavo-colors-taurus-eslint-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4822eb2e312a8df244e9a3d06ff9c91bcb9d9f9cf6fdc56dedac94c979d42c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180266
Malicious code in async-iota-pavo-quasar npm...
Malicious code in airbnb-titan-pavo-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1598783b15eca6936335df4a84a0344e4d4d3e714804992c93e368d3a8cf3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175630
Malicious code in wavefunction-ariel-pavo-equinox npm...
EUVD-2025-177722
Malicious code in mysql-fork-pavo-firebase npm...
EUVD-2025-179037
Malicious code in eslint-plugin-husky-pavo-virgo npm...
MAL-2025-187039 Malicious code in foundation-await-pavo-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c032862fc81e78c2d89207df7e5c2e61ea1a07ef25158a271798bbb53ecb4610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...