1045 matches found
EUVD-2025-198736
Malicious code in capacitor-purchase-history npm...
MAL-2025-190766 Malicious code in capacitor-purchase-history (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef54df7bce3add5d55de2f91510b75ffc757c47626010c4f44b59ef8f08242c The package capacitor-purchase-history was found to contain malicious code. Source: ghsa-malware...
PT-2025-47284
Name of the Vulnerable Software and Affected Versions Live sales notification for WooCommerce plugin for WordPress versions prior to 2.3.39 Description The Live sales notification for WooCommerce plugin for WordPress is affected by a missing authorization issue. The getOrders function does not ha...
Malicious code in post-purchase-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7c59be0aca6f22fc3b7ea58767ce53286e50138bbb75674cc2a7cdce3d1ad4 The package post-purchase-frontend was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
EUVD-2025-38729
Malicious code in post-purchase-frontend npm...
MAL-2025-49731 Malicious code in post-purchase-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7c59be0aca6f22fc3b7ea58767ce53286e50138bbb75674cc2a7cdce3d1ad4 The package post-purchase-frontend was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
EUVD-2025-37929
A vulnerability in the XiaozhangBang Voluntary Like System V8.8 allows remote attackers to manipulate the zhekou parameter in the /topfirst.php Pay module, enabling unauthorized discounts. By sending a crafted HTTP POST request with zhekou set to an abnormally low value, an attacker can purchase...
CVE-2025-60503
A cross-site scripting XSS vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 where input submitted in the purchase functionality is reflected without proper escaping in the admin log panel page in the 'reference No.' field. This flaw allows an authenticated...
CVE-2025-60503
A cross-site scripting XSS vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 where input submitted in the purchase functionality is reflected without proper escaping in the admin log panel page in the 'reference No.' field. This flaw allows an authenticated...
CVE-2025-60503
A cross-site scripting XSS vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 where input submitted in the purchase functionality is reflected without proper escaping in the admin log panel page in the 'reference No.' field. This flaw allows an authenticated...
PT-2025-44782
Name of the Vulnerable Software and Affected Versions ultimatefosters UltimatePOS version 4.8 Description A cross-site scripting XSS flaw exists in the administrative interface of the software. Input provided in the purchase functionality is reflected without proper sanitization in the admin log...
CVE-2025-60503: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 where input submitted in the purchase functionality is reflected without proper escaping in the admin log panel page in the 'reference No.' field. This flaw allows an authenticated...
Malicious code in epic-node-purchase (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63337f3a030d3ef393954fc2e0063f3a328979d065839f7c01f6e089e6a0689 The package epic-node-purchase was found to contain malicious code...
Malicious code in epic-web-purchase-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c0f0244033cb7d783e430a89d61d08f850df810d2b284dd37e150d6004dae1 The package epic-web-purchase-frontend was found to contain malicious code...
EUVD-2025-37122
Malicious code in epic-node-purchase npm...
EUVD-2025-37077
Malicious code in epic-web-purchase-frontend npm...
MAL-2025-49171 Malicious code in epic-node-purchase (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63337f3a030d3ef393954fc2e0063f3a328979d065839f7c01f6e089e6a0689 The package epic-node-purchase was found to contain malicious code...
MAL-2025-49216 Malicious code in epic-web-purchase-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c0f0244033cb7d783e430a89d61d08f850df810d2b284dd37e150d6004dae1 The package epic-web-purchase-frontend was found to contain malicious code...
Discord warns users after data stolen in third-party breach
Popular social platform Discord has suffered a data breach—though technically, it wasn’t Discord itself that was hacked. A third-party customer support provider was compromised, allowing attackers to access Discord’s user data. Either way, it’s Discord users who feel the impact. The breach, which...