Lucene search
+L

4 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/24 10:18 p.m.10 views

Malicious code in syspo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f89c590b7c90182cb86bc3e45f71f2357003f4359b6e94818fc996951762f5c The package is published as a 'System binary configuration tool' but its actual behavior is a covert clipboard/screen-capture overlay. On invocation...

5.9AI score
SaveExploits0References2
NVD
NVD
added 2026/04/01 10:16 p.m.6 views

CVE-2026-34565

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input when adding Posts to navigation menus through the Menu Manageme...

9.1CVSS0.00269EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/01 9:26 p.m.6 views

CVE-2026-34565 CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input when adding Posts to navigation menus through the Menu Manageme...

9.1CVSS5.7AI score0.00269EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/11/23 12:0 a.m.7 views

WordPress plugin Enter Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.3CVSS8AI score0.00433EPSS
SaveExploits0References2
Rows per page
Query Builder