CVE-2025-3352

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-scdetails.php. The manipulation of the argument contnum leads to sql injection. The attack may be launched remotely...

CVE-2025-3331

A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. This issue affects some unknown processing of the file /paymentsave.php. The manipulation of the argument mode leads to sql injection. The attack may be initiated remotely. T...

Malicious code in monitor-inference-results (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a81996c10459a5786a55c906eda2f407966455557441d103e3d55c4ab53e1c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in debug11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494ce30e156e31a77830da340b86accd5cfe85da1c6bbbe4073277d4980b3009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in at-authorize-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17db7733ab98695568b1f41dba8b8b5d956a4fefa940f73863c0d2b1e2974845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gg-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ceecd3deef3af30a9aec7271bbbfbe9e5478c5cd84c6fa3596a9280dc4e10be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockzie-vm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb3a57f31a55bf6b61e947fd54bb26e5de20bc664ed157e3551c9c8342bd7a72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in task_process (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1e7a5dfb4ee6d32aa4572b0a03173d625939980cce6bb4240f1f8412e4f2acd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-vue5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec32cca6168cf6f67a5387e271049dd0d253af0be7055afd2b80f4d2fab43b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scriptconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd3ce93e4d932714fc3eccce5d02ae6e79657a46f27202ecbe3278d0414555e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aiven-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7ef5fbee116dc7c6a033971fa455298110b289026b14470eb6120ae7aa06467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in event-handle-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07ebcac63455f7e71c3494f3d9dcff8de8fcc17290bff93372dd297555198012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mern-ecom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81fdc4ccb8d87c17695fc5ab8f7f8e41ace4f8047187df568530dc8f34d311d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in json-schema-verify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2806afc266e5a393fae137cdfc3b662c6185c8a15e38486f79a22f6962cd0ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @idps/contrib-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b812aaf7e12bd61301969890faac8bcd578104dec35d8c53abfd520ab05c4c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-6877 · Fastcms · Fastcms

Name of the Vulnerable Software and Affected Versions: FastCMS versions up to 0.1.5 Description: A vulnerability has been found in the Template Menu component of FastCMS, affecting unknown code of the file /fastcms.html/template/menu. The manipulation leads to cross-site scripting. The attack can...

CVE-2024-3482

A Stored Cross-Site Scripting XSS vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited...

Malicious code in my-amazing-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c71c801ccbdb1e61e20e28e334f4941295082217b2970b9359d91fd3781b2466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in microsoft-authentication-libraries-for-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f75669d6664923be2d575d6ea6dd476150b546b8a89bf1af9ee6fd470045b85f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-terminal-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7a95bb17689730a0610fcb7b778624d3e4ca1062cf249a15afb2e5b9aa5084 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...