11768 matches found
MAL-2025-2210 Malicious code in poc-genrateed-by-noob (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2adff977f2503f0afe5fb20e3154fa4f8c9a3d0fa5dc7a96613fb5b9434673b4 The OpenSSF Package Analysis project identified 'poc-genrateed-by-noob' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The...
CZS CMS 1.3.0 Cross Site Request Forgery
CZS CMS version 1.3.0 suffers from a cross site request forgery vulnerability. Exploit Title: CZS CMS 1.3.0 - Cross Site Request Forgery CSRF Add Admin Date: 2024-05-03 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.cszcms.com Software Link:...
Hestia Control Panel 1.9.3 Remote Code Execution
Hestia Control Panel version 1.9.3 suffers from a remote command execution vulnerability. Exploit Title: Hestia Control Panel Remote Code Execution Google Dork: N/A Date: 05-03-2025 Exploit Author: Buğra Enis Dönmez n3c1 Vendor Homepage: https://hestiacp.com/ Software Link: https://hestiacp.com/...
Malicious code in dep-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 880d5ea6c43eb50d284249180eca08fc64f4f7efa0a1e1abaaf234acfce4b6d6 The OpenSSF Package Analysis project identified 'dep-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicat...
MAL-2025-1672 Malicious code in dep-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 880d5ea6c43eb50d284249180eca08fc64f4f7efa0a1e1abaaf234acfce4b6d6 The OpenSSF Package Analysis project identified 'dep-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicat...
Malicious code in dependencies-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c3ca96aa79b3d1be281fd751a05f4550a914026dcfd52672223bb466cf6e3d6 The OpenSSF Package Analysis project identified 'dependencies-poc' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
MAL-2025-1673 Malicious code in dependencies-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c3ca96aa79b3d1be281fd751a05f4550a914026dcfd52672223bb466cf6e3d6 The OpenSSF Package Analysis project identified 'dependencies-poc' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
CVE-2024-13363
The Raptive Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'poc' parameter in all versions up to, and including, 3.6.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts...
Exploit for Deserialization of Untrusted Data in Ibm Sterling_B2B_Integrator
IBM Sterling B2B Integrator PoC Proof of concept code for the...
ABB Cylon FLXeon 9.3.4 (app.js) Insecure CORS Configuration
Summary BACnet® Smart Building Controllers. ABB's BACnet portfolio features a series of BACnet® IP and BACnet MS/TP field controllers for ASPECT® and INTEGRA™ building management solutions. ABB BACnet controllers are designed for intelligent control of HVAC equipment such as central plant, boiler...
Malicious code in zkwasm-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6469b76f120091996789c8a222676a36dc660a1a3411c27b232b1938a6b40d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1264 Malicious code in zkwasm-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6469b76f120091996789c8a222676a36dc660a1a3411c27b232b1938a6b40d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1212 Malicious code in cth-poc (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in cth-poc (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in firehose-poc-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf904e76972bcc2c5a275af86c2f0562ac2be401605c8b36b8e3c886a5a985ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1123 Malicious code in firehose-poc-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf904e76972bcc2c5a275af86c2f0562ac2be401605c8b36b8e3c886a5a985ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Type Confusion in Mozilla Firefox
CVE-2024-8381 A SpiderMonkey Interpreter Type Confusion Bug...
Malicious code in kuvvet_poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a15f57daa0dfb5fe047124342523add2a4d20eebd28713661823ae555930135 The OpenSSF Package Analysis project identified 'kuvvetpoc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...
Malicious code in another-depconf-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6876487b755ba50effc916826fdb407f0f653893569fef933deb61a21a8d6626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...