Lucene search
+L

12 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/05 12:59 p.m.6 views

Malicious code in fundraiserservpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bca913238607a18079a675e2fe652c25c04c2bbc62f5c577bb2b6d2424cd4a8 [email protected] runs node index.js as a preinstall lifecycle script on npm install. The script collects host metadata from the installer machi...

5.5AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 2:28 a.m.9 views

CVE-2023-27070

A stored cross-site scripting XSS vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field...

5.4CVSS5.6AI score0.00521EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/04 9:30 p.m.4 views

GHSA-JJ45-24RW-V6JW Cross-site scripting in TotalJS

A stored cross-site scripting XSS vulnerability in TotalJS allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module...

5.4CVSS6.2AI score0.00667EPSS
SaveExploits1References7
OSV
OSV
added 2023/05/04 8:15 p.m.11 views

CVE-2023-30094

A stored cross-site scripting XSS vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module...

5.4CVSS6.2AI score0.00667EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/05/04 12:0 a.m.42 views

CVE-2023-30094

A stored cross-site scripting XSS vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module...

5.4AI score0.00667EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/05/04 12:0 a.m.7 views

TotalJS Flow 跨站脚本漏洞

TotalJS Flow is an open source application for the Total.js Platform. A security vulnerability exists in version v10 of TotalJS Flow. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the Platform Name field in the...

5.4CVSS6.1AI score0.00667EPSS
SaveExploits1References5
NVD
NVD
added 2023/03/14 4:15 p.m.18 views

CVE-2023-27070

A stored cross-site scripting XSS vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field...

5.4CVSS5.3AI score0.00521EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/03/14 12:0 a.m.32 views

CVE-2023-27070

A stored cross-site scripting XSS vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field...

5.4AI score0.00521EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/03/14 12:0 a.m.8 views

PT-2023-20933 · Unknown · Totaljs Openplatform

Name of the Vulnerable Software and Affected Versions: TotalJS OpenPlatform version b80b09d Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field. Recommendations: For version...

5.4CVSS5.5AI score0.00521EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2017/12/11 12:0 a.m.38 views

Hirschmann Devices Detection (SNMP)

This script performs SNMP based detection of Hirschmann Devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2017/12/11 12:0 a.m.40 views

Hirschmann Devices Detection (Telnet)

Telnet based detection of Hirschmann Devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2017/12/11 12:0 a.m.18 views

Hirschmann Device Detection Consolidation

Consolidation of Hirschmann device detections. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.1AI score
SaveExploits0
Rows per page
Query Builder