128 matches found
Malicious code in main.prod (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d49c9c22f69777b9b4a925ef9f7a26be11467cba5977a25557db82dc1541a5d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-447 Malicious code in @nab-trade/mnt-prod (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b85a717dd942a99927d88b18c4be4c0103949e7a22901db0ce38f4b0827e5c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @nab-trade/mnt-prod (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b85a717dd942a99927d88b18c4be4c0103949e7a22901db0ce38f4b0827e5c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5814 Malicious code in rjs-prod-fixture (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30c862f44b7839925f2823e23dd338f99734cb1279c00443a734675b9626e7ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rjs-prod-fixture (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30c862f44b7839925f2823e23dd338f99734cb1279c00443a734675b9626e7ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-770 Malicious code in @xvideos/prod (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17bb3ab3f378ad8f34fe004840531987f6c14f518c23a8131e7a04d9ad5064d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2969 Malicious code in fastly-realtime-stats-prod (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69eac7a2e83ec3170454072cd78940a80689a9f2708167da078fb45c179996c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-21929
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘prodfilter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery...
prod-orders-bench.utorrent.com Cross Site Scripting vulnerability OBB-2298853
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Advantech R-SeeNet SQL注入漏洞
Advantech R-SeeNet is an industrial monitoring software from Advantech Taiwan. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to SQL injection, which is caused by insufficient cleaning of...
prod-week.ru Improper Access Control vulnerability OBB-2267267
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
All Vulnerabilities for prod-l0dup05.larc.nasa.gov Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
prod-web02.biolegend.com Cross Site Scripting vulnerability OBB-1400903
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Path Traversal in sapper
Versions of sapper prior to 0.27.11 are vulnerable to Path Traversal. It is possible to access sensitive files on the server through HTTP requests containing URL-encoded ../. You may test a sapper application running in prod mode with curl -vvv...
prod-tech.eu Cross Site Scripting vulnerability OBB-1228773
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE Api - Parse & filter the latest CVEs from cve.mitre.org
Parse & filter the latest CVEs from https://cve.mitre.org. Docs Usage http://localhost:4000/cve?target=KEYWORD The year parameter is optional. http://localhost:4000/cve?target=KEYWORD&year=YEAR Examples http://localhost:4000/cve?target=ruby%20on%20rails...
CVE-2018-17560
The admin interface of the Grouptime Teamwire Client 1.5.1 prior to 1.9.0 on-premises messenger server allows stored XSS. All backend versions prior to prod-2018-11-13-15-00-42 are affected...
suntouchsunglasses.com XSS vulnerability
Open Bug Bounty ID: OBB-668124 Description| Value ---|--- Affected Website:| suntouchsunglasses.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
acsverhuur.nl XSS vulnerability
Open Bug Bounty ID: OBB-641935 Description| Value ---|--- Affected Website:| acsverhuur.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...