30402 matches found
Malicious code in project-luck (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6950 Malicious code in project-luck (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in vite-plugin-netx-project (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6967 Malicious code in vite-plugin-netx-project (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-55203
Plane is open-source project management software. Prior to version 0.28.0, a stored cross-site scripting XSS vulnerability exists in the descriptionhtml field of Plane. This flaw allows an attacker to inject malicious JavaScript code that is stored and later executed in other users’ browsers. The...
CVE-2025-55203 Plane Stored XSS in Add Work Item Functionality
Plane is open-source project management software. Prior to version 0.28.0, a stored cross-site scripting XSS vulnerability exists in the descriptionhtml field of Plane. This flaw allows an attacker to inject malicious JavaScript code that is stored and later executed in other users’ browsers. The...
CVE-2025-55203 Plane Stored XSS in Add Work Item Functionality
Plane is open-source project management software. Prior to version 0.28.0, a stored cross-site scripting XSS vulnerability exists in the descriptionhtml field of Plane. This flaw allows an attacker to inject malicious JavaScript code that is stored and later executed in other users’ browsers. The...
CVE-2025-55203
Plane is an open‑source project management tool. A stored XSS vulnerability exists in the description_html field prior to version 0.28.0, where unsanitized/uncleaned input allows attacker‑provided JavaScript to be saved in the database and executed in other users’ browsers. Impacts include potent...
CVE-2025-9012 PHPGurukul Online Shopping Portal Project bill-ship-addresses.php sql injection
A vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.0. This affects an unknown part of the file shopping/bill-ship-addresses.php. The manipulation of the argument billingpincode leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
MAL-2025-6879 Malicious code in @yaqiguo/dnstest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3478ba78740bef836d1172c597de70dda1774f80ed7d9c3b8273dc9fbc9db71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PHPGurukul Online Shopping Portal Project 注入漏洞
Online Shopping Portal Project is an online shopping portal project. Online Shopping Portal Project suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter billingpincode in the file...
PT-2025-34582 · Git · Libwebp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438294044 Crash type: Null-dereference READ Crash state: enc [email protected]...
Malicious code in tranquil-z8e7k-5t7m0-drift-project (npm)
The package tranquil-z8e7k-5t7m0-drift-project was found to contain malicious code...
Malicious code in vortex-dune-vnx922-project (npm)
The package vortex-dune-vnx922-project was found to contain malicious code...
Malicious code in raspberry-9bm-project (npm)
The package raspberry-9bm-project was found to contain malicious code...
Malicious code in whale-vortex-cfi793-project (npm)
The package whale-vortex-cfi793-project was found to contain malicious code...
Malicious code in raspberry-cca-project (npm)
The package raspberry-cca-project was found to contain malicious code...
Malicious code in uranium-vortex-ooj444-project (npm)
The package uranium-vortex-ooj444-project was found to contain malicious code...