235 matches found
Malicious Package
Overview lint-pavo-meissa-aquarius is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
CVE-2026-1989
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-1989
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-1989
Technical details of CVE-2026-1989 are not publicly available in the provided documents; monitor for updates.
EUVD-2026-42553
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-1989 IDOR in PAVO Inc.'s PAVO Pay
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-1989 IDOR in PAVO Inc.'s PAVO Pay
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-1989: Authorization Bypass Through User-Controlled Key
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
PT-2026-56761
Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows Exploitation of Trusted Identifiers. This issue affects PAVO Pay: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
Malicious code in pavo-colors-taurus-eslint-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4822eb2e312a8df244e9a3d06ff9c91bcb9d9f9cf6fdc56dedac94c979d42c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176119
Malicious code in superflare-paleoclimatology-pavo-lacerta npm...
EUVD-2025-175488
Malicious code in xerxes-paleontology-dorado-pavo npm...
EUVD-2025-177293
Malicious code in pavo-helmet-titan-kinetic npm...
EUVD-2025-177291
Malicious code in pavo-xenon-markdownlint-enceladus npm...
EUVD-2025-176334
Malicious code in slidev-supernova-pavo-zephyr npm...
EUVD-2025-179461
Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo npm...
EUVD-2025-180266
Malicious code in async-iota-pavo-quasar npm...
Malicious code in foundation-await-pavo-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c032862fc81e78c2d89207df7e5c2e61ea1a07ef25158a271798bbb53ecb4610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...