Lucene search
K

18 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 4:29 a.m.2 views

Malicious code in rocket-koa-query-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e9a1af132a8126638baca3a85673704533f89020924385e0120402a4b1d9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
EUVD
EUVD
added 2025/11/12 4:29 a.m.1 views

EUVD-2025-122450

Malicious code in rocket-koa-query-loop npm...

6.6AI score
Exploits0
OSV
OSV
added 2025/11/12 4:29 a.m.1 views

MAL-2025-147472 Malicious code in rocket-koa-query-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e9a1af132a8126638baca3a85673704533f89020924385e0120402a4b1d9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
OSV
OSV
added 2025/09/05 5:10 p.m.1 views

MAL-2025-43875 Malicious code in commitlint-query-loop-gulp (npm)

The package commitlint-query-loop-gulp was found to contain malicious code...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.2 views

Malicious code in commitlint-query-loop-gulp (npm)

The package commitlint-query-loop-gulp was found to contain malicious code...

7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 3:36 a.m.5 views

CVE-2023-28455

An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and causing potential DoS...

7.5CVSS6.9AI score0.00143EPSS
Exploits0References1
OSV
OSV
added 2024/09/18 3:15 p.m.0 views

CVE-2023-28455

An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and causing potential DoS...

7.5CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2024/09/18 3:15 p.m.9 views

CVE-2023-28455

An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and causing potential DoS...

7.5CVSS0.00143EPSS
Exploits0References2
CVE
CVE
added 2024/09/18 12:0 a.m.39 views

CVE-2023-28455

The CVE-2023-28455 issue affects Technitium DNS Server (up to v11.0.2). The root cause is a forwarding mode pattern that can create query loops in Technitium resolvers, enabling amplification and potential DoS. Documented impacts describe denial-of-service risk due to network-based query looping....

7.5CVSS6.9AI score0.00143EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/09/18 12:0 a.m.6 views

CVE-2023-28455

An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and causing potential DoS...

0.00143EPSS
Exploits0References2
OSV
OSV
added 2024/03/13 4:15 p.m.0 views

CVE-2024-1452

The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.2 via Query Loop. This makes it possible for authenticated attackers, with contributor access and above, to see contents of posts and pages in draft or private status ...

4.3CVSS5.8AI score
Exploits0References4
NVD
NVD
added 2024/03/13 4:15 p.m.11 views

CVE-2024-1452

The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.2 via Query Loop. This makes it possible for authenticated attackers, with contributor access and above, to see contents of posts and pages in draft or private status ...

4.3CVSS4.3AI score0.00241EPSS
Exploits0References4
Prion
Prion
added 2024/03/13 4:15 p.m.16 views

Design/Logic Flaw

The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.2 via Query Loop. This makes it possible for authenticated attackers, with contributor access and above, to see contents of posts and pages in draft or private status ...

4CVSS6.8AI score0.00241EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/03/13 3:26 p.m.18 views

CVE-2024-1452 GenerateBlocks <= 1.8.2 - Sensitive Information Exposure

The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.2 via Query Loop. This makes it possible for authenticated attackers, with contributor access and above, to see contents of posts and pages in draft or private status ...

4.3CVSS4.6AI score0.00241EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/03/13 3:26 p.m.11 views

CVE-2024-1452 GenerateBlocks <= 1.8.2 - Sensitive Information Exposure

The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.2 via Query Loop. This makes it possible for authenticated attackers, with contributor access and above, to see contents of posts and pages in draft or private status ...

4.3CVSS6.6AI score0.00241EPSS
Exploits0References4
WPVulnDB
WPVulnDB
added 2024/03/01 12:0 a.m.21 views

GenerateBlocks < 1.8.3 - Contributor+ Arbitrary Draft/Private Post Access

Description The plugin is vulnerable to Sensitive Information Exposure via Query Loop, allowing authenticated attackers, with contributor access and above, to see contents of posts and pages in draft or private status as well as those with scheduled publication dates...

4.3CVSS6.3AI score0.00241EPSS
Exploits0References1Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 8:2 p.m.47 views

K49116387: BIND vulnerabilities CVE-2017-3140 and CVE-2017-3141

Security Advisory Description CVE-2017-3140 If named is configured to use Response Policy Zones RPZ an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0-9.11.1, 9.9.10-S1, 9.10.5-S1. An error...

7.8CVSS6.3AI score0.34362EPSS
Exploits5
SUSE CVE
SUSE CVE
added 2023/02/15 4:52 a.m.0 views

SUSE CVE-2017-3140

If named is configured to use Response Policy Zones RPZ an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0-9.11.1, 9.9.10-S1, 9.10.5-S1...

3.7CVSS6.9AI score0.34362EPSS
Exploits0References4
Rows per page
Query Builder