213 matches found
CVE-2026-114119
Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin,...
EUVD-2026-106922
Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin,...
CVE-2026-114119
Best Practice Software Bp Premier versions prior to 1.14.1.1128 contain a hardcoded Microsoft SQL Server administrative password shared across all installations. This credential cannot be modified without breaking the application. An attacker with network access to the database instance can use t...
CVE-2026-15946: Missing Authorization
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.23. This is due to the plugin not properly verifying that a user is authorized to perform an...
PT-2026-95781
Name of the Vulnerable Software and Affected Versions Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization versions prior to 2.6.24 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform...
CVE-2025-14386: Missing Authorization
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the 'generatessourl' and 'validatessotoken' functions in versions 2.4.4 to 2.5.12. This makes it...
MAL-2025-136262 Malicious code in premier_parrotfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5699a0583e37e240735827b673b633ba6808bcf569fcf7a438839c1e6c21e00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-89454
Malicious code in premierlizardz3n npm...
Malicious code in premier_lizard_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b4dd2e33050b22c3964426ecb78185af349c4a337c2cb8dbae586ca63f7caf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78577
Malicious code in premiermuskoxz3n npm...
EUVD-2025-78578
Malicious code in premierlynxz3n npm...
Malicious code in premier_squid_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6056f1d84d66aad34f95a8eb99730671f9f275532b8077bc46ffc190e0229700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-80907
Malicious code in premiercephalopoddumbs npm...
Malicious code in premier_guppy_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0106022c86572ac8183368a4f77391fb17539a3cb8dd11018c06a8aeb0ac745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-62569
Malicious code in premierguppyz3n npm...
MAL-2025-89500 Malicious code in premier_scorpion_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83df24e5f4d743279de53ad5a5d910d68bb568f5c93e8ad8a948e163083e36ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-67752
Malicious code in premierstoatz3n npm...
EUVD-2025-52667
Malicious code in premier-plum-grouse npm...
Malicious code in premier-plum-grouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d828f74d07a4f20b9b2262f08d9965da316f9f28517a8ca29fb290bf916a013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...