Malicious code in user-auth-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b608ccf9fc17ed8b9f63d111d944139326e52c3a5fb88710e0492e52f8f3ded4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4707

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transactionadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be initiated remotely. The explo...

Malicious code in prettier-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e45dae9f24ebe77c9b7a50a5c45b3a141874389968d29e773f3f2aa8633a0a9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mafid-prod-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ab349dc0f539992fdb9d4baf49cbe8b67efe4f92fc9e163454386aea92fee1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sf-intl-sn-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4cc33212e001bc0af0440f49eb0c52cdc0ad223eba555c5cb2afaa9931e5c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in synch-prod-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff531f663782c2e1a1b12202fa492a99336662a683528d75910f308b12a22dbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11181 Malicious code in synch-prod-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff531f663782c2e1a1b12202fa492a99336662a683528d75910f308b12a22dbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9274 Malicious code in gcp-monitor-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ac49f0f48f0a8f3b5ab417aeeeac247298e9ab4f211f88aadcca93bc624e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atlasctf-21-prod-22 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bfee78d470601bcc72e8aa74eca9adb869998b939cff36a4a0dc6d12bfd8c297 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-5097 Malicious code in atlasctf-21-prod-22 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bfee78d470601bcc72e8aa74eca9adb869998b939cff36a4a0dc6d12bfd8c297 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

PT-2024-33440 · Sourcecodester · Sourcecodester Simple Online Bidding System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical issue was found in the software, affecting the file /simple-online-bidding-system/index.php?page=view prod. The manipulation of the id argument leads to SQL...

CVE-2024-23816

CVE-2024-23816 affects Siemens Location Intelligence products (Perpetual Large/Medium/Non-Prod/Small and SUS Large/Medium/Non-Prod/Small). Root cause: use of a hard-coded secret for Keyed-Hash Message Authentication Code computation, enabling an unauthenticated remote attacker to gain full admini...

db-prod-bcul.unil.ch Cross Site Scripting vulnerability OBB-3610724

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cga-prod-11.oxyd.net Cross Site Scripting vulnerability OBB-3412609

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

db-prod-bcul.unil.ch Cross Site Scripting vulnerability OBB-3341835

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

db-prod-bcul.unil.ch Cross Site Scripting vulnerability OBB-3301493

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-16612 · Sourcecodester · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue has been found in the GET Parameter Handler component of the view prod.php file, where the manipulation of the ID argument leads to sql injection. This issu...

prod-www-aah.cloud.jahia.com Open Redirect vulnerability OBB-2881442

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-5470 Malicious code in prod-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4326c555021a508bdb7ad12b4afee91b37b9dc63c21329eff5cd88f41ce363e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prod-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4326c555021a508bdb7ad12b4afee91b37b9dc63c21329eff5cd88f41ce363e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...