MAL-2025-67857 Malicious code in drab-pink-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d029d69e22033864d9bc744cf72cc375b6ee27a0107a163d527936d6e59e4370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68154 Malicious code in exciting-pink-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a2c78cf2e1d46d7790981a1079c9aaad1a3de138326e1fb0707a8f534f0cc6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2024-36923

Malicious code in bioql PyPI...

Malicious code in @zalastax/nolb-pink (npm)

The package @zalastax/nolb-pink was found to contain malicious code...

MAL-2025-13172 Malicious code in @zalastax/nolb-pink (npm)

The package @zalastax/nolb-pink was found to contain malicious code...

CVE-2024-37426

Cross-Site Request Forgery CSRF vulnerability in raratheme Elegant Pink elegant-pink allows Cross Site Request Forgery.This issue affects Elegant Pink: from n/a through = 1.3.0...

CVE-2024-37426

Cross-Site Request Forgery CSRF vulnerability in Rara Theme Elegant Pink allows Cross Site Request Forgery.This issue affects Elegant Pink: from n/a through 1.3.0...

CVE-2024-37426

Cross-Site Request Forgery CSRF vulnerability in raratheme Elegant Pink elegant-pink allows Cross Site Request Forgery.This issue affects Elegant Pink: from n/a through = 1.3.0...

CVE-2024-37426 WordPress Elegant Pink theme 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rara Theme Elegant Pink allows Cross Site Request Forgery.This issue affects Elegant Pink: from n/a through 1.3.0...

CVE-2024-37426

CVE-2024-37426 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin/theme combo “Elegant Pink” (Rara Theme) up to version 1.3.0. Public records consistently describe it as a CSRF issue in Elegant Pink; CVSS from NVD assigns 4.3 (Medium) with network attack vector, l...

CVE-2024-37426 WordPress Elegant Pink theme 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in raratheme Elegant Pink elegant-pink allows Cross Site Request Forgery.This issue affects Elegant Pink: from n/a through = 1.3.0...

PT-2025-2480

Name of the Vulnerable Software and Affected Versions: Rara Theme Elegant Pink versions 1.3.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the...

WordPress plugin Elegant Pink 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

Malicious code in conservation-pink-armadillo (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9569 Malicious code in conservation-pink-armadillo (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress Elegant Pink theme 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Elegant Pink versions = 1.3.0...

WordPress Elegant Pink Theme <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Elegant Pink Type Theme Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37426 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 99a0cff503d1 Credits Dhabaleshwar Das Requir...

pink-tankstellen.at Cross Site Scripting vulnerability OBB-3832925

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pink-box.at Cross Site Scripting vulnerability OBB-3832924

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-30686

Name of the Vulnerable Software and Affected Versions PyPinkSign version 0.5.1 Description The issue concerns the use of a non-random or static Initialization Vector IV in Cipher Block Chaining CBC mode for Advanced Encryption Standard AES encryption. This can potentially lead to the disclosure o...