Lucene search
+L

196 matches found

Github Security Blog
Github Security Blog
•added 2026/10/20 9:31 a.m.•14 views

Malicious code in @platform-services/hrm-mfe-core (npm)

Source: ossf-package-analysis c7552efe145088950a0df7a5c63da92a309a040fba2062a4d32bb59cadc9ec47 The OpenSSF Package Analysis project identified '@platform-services/hrm-mfe-core' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

5.9AI score
SaveExploits0References4Affected Software1
Snyk
Snyk
•added 2026/10/20 9:31 a.m.•6 views

Malicious Package

Overview @platform-services/hrm-mfe-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

9.8CVSS5.9AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/20 6:40 a.m.•14 views

MAL-2026-18091 Malicious code in @platform-services/hrm-mfe-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6340950b2d19371534634bc33af5c0b785b1fa105a5c1084c5689879c4b03da8 package.json declares a dependency whose key equals the package's own name, @platform-services/hrm-mfe-core, with its source set to the bare URL...

6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/20 6:40 a.m.•15 views

Malicious code in @platform-services/hrm-mfe-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6340950b2d19371534634bc33af5c0b785b1fa105a5c1084c5689879c4b03da8 package.json declares a dependency whose key equals the package's own name, @platform-services/hrm-mfe-core, with its source set to the bare URL...

6AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/07/22 12:32 a.m.•25 views

EUVD-2026-47373

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided...

7.1CVSS7AI score0.00392EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/22 12:32 a.m.•23 views

EUVD-2026-47362

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided...

9.8CVSS7.3AI score0.00508EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/22 12:32 a.m.•24 views

EUVD-2026-47364

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Commerce Guided...

9.1CVSS7.1AI score0.00425EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/22 12:32 a.m.•21 views

EUVD-2026-47363

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided...

9.1CVSS7.1AI score0.00494EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/21 10:18 p.m.•17 views

CVE-2026-61154

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided...

9.8CVSS0.00508EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/21 10:18 p.m.•18 views

CVE-2026-61155

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided...

9.1CVSS0.00494EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•24 views

PT-2026-63041

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search Platform Services version 11.4.0 Description An issue exists in the Forge component of Oracle Commerce Guided Search Platform Services. An unauthenticated attacker with network access via HTTPS can compromise the...

9.1CVSS7.1AI score0.00425EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•22 views

PT-2026-63040

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search Platform Services version 11.4.0 Description An issue exists in the Forge component of Oracle Commerce Guided Search Platform Services. An unauthenticated attacker with network access via HTTP can compromise the...

9.1CVSS7.1AI score0.00494EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•24 views

PT-2026-63039

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search Platform Services version 11.4.0 Description An issue exists in the Forge component of Oracle Commerce Guided Search Platform Services. An unauthenticated attacker with network access via HTTP can exploit this fla...

9.8CVSS7.1AI score0.00508EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•7 views

CVE-2026-61165: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided...

7.1CVSS5.8AI score0.00392EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•9 views

CVE-2026-61156: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Commerce Guided...

9.1CVSS5.8AI score0.00425EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2017-14783

Malware in sbrugna...

7.8CVSS7.6AI score0.00686EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•35 views

EUVD-2018-4176

Malware in sbrugna...

6CVSS6.7AI score0.0034EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•29 views

EUVD-2018-4125

Malware in sbrugna...

7.2CVSS6.9AI score0.00458EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•28 views

EUVD-2025-24439

Malicious code in bioql PyPI...

6.8CVSS6.6AI score0.00164EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•44 views

EUVD-2022-53106

Malicious code in bioql PyPI...

9.1CVSS8.1AI score0.33258EPSS
SaveExploits1References2
Rows per page
Query Builder