Lucene search
K

24 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/16 4:24 a.m.9 views

Malicious code in @ts-internal/shared-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afc836ea4b9ecc7e09f0add976470f1b4e253f8b5b53b3ce706889efb349171 The package squats the internal-looking scope @ts-internal/shared-lib on the public npm registry and runs a network beacon both during install...

5.4AI score
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-47962

Malicious code in bioql PyPI...

9.3CVSS6.6AI score0.00104EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-30641

Malicious code in bioql PyPI...

4.4CVSS5.2AI score0.00125EPSS
Exploits0References1
OSV
OSV
added 2025/06/15 11:23 a.m.3 views

MINI-XHPW-MR86-W8FF

Bulletin has no description...

7.5CVSS7.9AI score0.00311EPSS
Exploits0
NVD
NVD
added 2024/06/03 10:15 a.m.13 views

CVE-2023-43556

Memory corruption in Hypervisor when platform information mentioned is not aligned...

9.3CVSS9.4AI score0.00104EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/03 10:5 a.m.28 views

CVE-2023-43556 Buffer Copy Without Checking Size of Input in Hypervisor

Memory corruption in Hypervisor when platform information mentioned is not aligned...

9.3CVSS9.4AI score0.00104EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/03 10:5 a.m.12 views

CVE-2023-43556 Buffer Copy Without Checking Size of Input in Hypervisor

Memory corruption in Hypervisor when platform information mentioned is not aligned...

9.3CVSS6.9AI score0.00104EPSS
Exploits0References1
Citrix
Citrix
added 2024/03/07 12:0 a.m.5 views

Get License, Hardware and Platform details from API call

Get the output of Hardware, platform and License via API...

7.2AI score
Exploits0
Snyk
Snyk
added 2023/02/10 9:5 a.m.3 views

Malicious Package

Overview s3trnasfer is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass...

9.8CVSS6.8AI score
Exploits0References2
Snyk
Snyk
added 2023/02/10 9:5 a.m.2 views

Malicious Package

Overview requst is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass impor...

9.8CVSS6.8AI score
Exploits0References2
Snyk
Snyk
added 2023/02/08 1:4 p.m.2 views

Malicious Package

Overview requiest is a malicious package. This malicious package attempts typosquatting the popular requests package. The malicious script is base64 obfuscated and tries to steal the current username and platform information and send them to a remote host. Malicious behavior python import getpass...

9.8CVSS6.8AI score
Exploits0References2
CNNVD
CNNVD
added 2022/01/28 12:0 a.m.4 views

Hitachi Energy LinkOne 信息泄露漏洞

Hitachi Energy LinkOne is an enterprise graphical parts catalog and content delivery solution from Hitachi Energy, Switzerland. It is used to publish, view and locate spare parts for complex equipment and assemblies. A security vulnerability exists in Hitachi Energy LinkOne, which arises from a...

7.5CVSS7.3AI score0.00725EPSS
Exploits0References5
Fortinet
Fortinet
added 2020/06/01 12:0 a.m.25 views

Protect

An information exposure vulnerability in FortiOS WEB UI may allow an unauthenticated attacker to gain platform information such as version, via parsing a JavaScript file...

5CVSS5.8AI score0.00909EPSS
Exploits0Affected Software1
NVD
NVD
added 2019/08/23 9:15 p.m.20 views

CVE-2018-13367

An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, models, via parsing a JavaScript file through admin webUI...

5.3CVSS5.4AI score0.00909EPSS
Exploits0References1
Prion
Prion
added 2019/08/23 9:15 p.m.20 views

Information disclosure

An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, models, via parsing a JavaScript file through admin webUI...

5CVSS5.4AI score0.00909EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2019/08/23 8:2 p.m.10 views

CVE-2018-13367

An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, models, via parsing a JavaScript file through admin webUI...

7.1AI score0.00909EPSS
Exploits0References1
CVE
CVE
added 2019/08/23 8:2 p.m.132 views

CVE-2018-13367

CVE-2018-13367 affects FortiOS (Fortinet) WEB UI, where an information-exposure flaw allows unauthenticated attackers to retrieve platform details (version, models) by parsing a JavaScript file served through the admin web UI. Affected releases include FortiOS 6.2.3, 6.2.0 and earlier versions. T...

5.3CVSS5.3AI score0.00909EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2018/09/28 12:0 a.m.4 views

Intel Power Management Controller Information Disclosure Vulnerability

Intel Power Management Controller is a power management controller from Intel Corporation USA. A security vulnerability exists in Intel Power Management Controller. A local attacker could exploit this vulnerability to disclose sensitive information about the platform...

7.7AI score
Exploits0References1
CNVD
CNVD
added 2017/10/27 12:0 a.m.3 views

IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2017-32856)

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. An information disclosure vulnerability exists in IBM BigFix Platform 9.2 and 9.5. The vulnerability arises because the software communicates sensitive or safety-critical data in plaintext over a channel tha...

5.9CVSS5.8AI score0.00842EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2017/04/13 12:0 a.m.5 views

The vulnerability of the iOS operating system and the Safari browser allows attackers to obtain information about the integration platform and the operating system, enabling them to carry out UXSS attacks.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to obtain information about the integration platform and the operating...

4.3CVSS6.9AI score0.04237EPSS
Exploits3References5Affected Software2
Rows per page
Query Builder