1451 matches found
CVE-2025-13275
CVE-2025-13275 concerns the Iqbolshoh php-business-website up to a rolling release build. All connected sources describe an issue in the file /admin/about.php that permits unrestricted file upload, with exploitation possible remotely. The vulnerability is widely reported as already disclosed publ...
EUVD-2025-197781
A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has be...
CVE-2025-13208
A security flaw has been discovered in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. The impacted element is an unknown function of the file controller/api/hotelList.php. The manipulation of the argument subjectId/cityName results in sql injection. The attack can be...
EUVD-2025-197734
A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The...
CVE-2025-13252
A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The...
EUVD-2025-197729
A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationFilter of the file src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The manipulation leads to path...
CVE-2025-13246
The CVE-2025-13246 entry affects shsuishang ShopSuite ModulithShop, specifically the JwtAuthenticationFilter in src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The vulnerability enables path traversal via the JwtAuthenticationFilter, with remote exploitation poss...
CVE-2025-13208 FantasticLBP Hotels Server hotelList.php sql injection
A security flaw has been discovered in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. The impacted element is an unknown function of the file controller/api/hotelList.php. The manipulation of the argument subjectId/cityName results in sql injection. The attack can be...
EUVD-2025-26364
A security vulnerability has been detected in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. This affects an unknown part. The manipulation of the argument filePath leads to path traversal. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and...
EUVD-2025-74285
Malicious code in rollingdormouseorange-17 npm...
EUVD-2025-75783
Malicious code in rollingboar-excellentdev npm...
Malicious code in rolling_panther_purple-28 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627eedb485e057e34481e3e2a0879159c3d77f9c125b84bb82f26c92a6a30903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78396
Malicious code in rollingangelfishz3n npm...
EUVD-2025-80682
Malicious code in rollingclownfish0xrequest npm...
MAL-2025-108186 Malicious code in rolling_clownfish_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8cce87139acd6bcc65887318007b6fcb0bf0f66bbab5201add71a42dbce8891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rolling_kiwi_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac20d258a475d6a0d470243b55aab472b0995c4f0beb10362eb17fb56645acd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-71376
Malicious code in rollingkoalaz3n npm...
Malicious code in rolling_cat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c5111caa1c2952a02647c1484752d9f577f28f8ff1797660e11b1ec0add415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...