Lucene search
+L

60196 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/16 9:39 a.m.15 views

Malicious code in @the-coca-cola-company/receipt-scanner-admin-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046b5475599d30f293f2eeb7ab9fce35c44cd678ab2cecde2c96e588a170d822 The package @the-coca-cola-company/receipt-scanner-admin-lib was found to contain malicious code...

5.7AI score
SaveExploits0References1
OSV
OSV
added 2026/04/16 9:39 a.m.14 views

MAL-2026-2718 Malicious code in @the-coca-cola-company/receipt-scanner-admin-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046b5475599d30f293f2eeb7ab9fce35c44cd678ab2cecde2c96e588a170d822 The package @the-coca-cola-company/receipt-scanner-admin-lib was found to contain malicious code...

5.7AI score
SaveExploits0References1
Patchstack
Patchstack
added 2026/04/16 9:05 a.m.19 views

WordPress Barcode Scanner (+Mobile App) plugin <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication vulnerability

Unauthenticated Privilege Escalation via Insecure Token Authentication vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.11.0...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/04/16 12:55 a.m.16 views

CLEANSTART-2026-DR81473 HashiCorp’s go-getter library up to v1

Multiple security vulnerabilities affect the harbor-scanner-trivy-fips package. HashiCorp’s go-getter library up to v1. See references for individual vulnerability details...

9.8CVSS5.7AI score0.00724EPSS
SaveExploits2References24
EUVD
EUVD
added 2026/04/16 12:54 a.m.12 views

EUVD-2026-23136

The Barcode Scanner +Mobile App – Inventory manager, Order fulfillment system, POS Point of Sale plugin for WordPress is vulnerable to privilege escalation via insecure token-based authentication in all versions up to, and including, 1.11.0. This is due to the plugin trusting a user-supplied...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/16 12:16 a.m.15 views

CVE-2026-4880

The Barcode Scanner +Mobile App – Inventory manager, Order fulfillment system, POS Point of Sale plugin for WordPress is vulnerable to privilege escalation via insecure token-based authentication in all versions up to, and including, 1.11.0. This is due to the plugin trusting a user-supplied...

9.8CVSS0.00503EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/04/16 12:11 a.m.177 views

VulnForge

VulnForge AI-Powered Vulnerability Scanner & Auto-Exploit E...

5.9AI score
SaveExploits0
CNNVD
CNNVD
added 2026/04/16 12:00 a.m.18 views

WordPress plugin Barcode Scanner 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/15 11:25 p.m.17 views

CVE-2026-4880

The Barcode Scanner +Mobile App – Inventory manager, Order fulfillment system, POS Point of Sale plugin for WordPress is vulnerable to privilege escalation via insecure token-based authentication in all versions up to, and including, 1.11.0. This is due to the plugin trusting a user-supplied...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/04/15 11:25 p.m.7 views

CVE-2026-4880 Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication

The Barcode Scanner +Mobile App – Inventory manager, Order fulfillment system, POS Point of Sale plugin for WordPress is vulnerable to privilege escalation via insecure token-based authentication in all versions up to, and including, 1.11.0. This is due to the plugin trusting a user-supplied...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/15 11:25 p.m.53 views

CVE-2026-4880 Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication

The Barcode Scanner +Mobile App – Inventory manager, Order fulfillment system, POS Point of Sale plugin for WordPress is vulnerable to privilege escalation via insecure token-based authentication in all versions up to, and including, 1.11.0. This is due to the plugin trusting a user-supplied...

9.8CVSS0.00503EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/15 11:25 p.m.19 views

CVE-2026-4880

The CVE concerns the WordPress plugin Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS, affected up to version 1.11.0. The root cause is insecure token-based authentication where the plugin trusts a user-supplied Base64-encoded user ID in the token parameter to ide...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/04/15 4:35 p.m.147 views

Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager

CVE-2026-20127 Scanner Overview This project is a Windows-based...

10CVSS7.4AI score0.88243EPSS
SaveExploits10
Positive Technologies
Positive Technologies
added 2026/04/15 12:00 a.m.22 views

PT-2026-33185

The Barcode Scanner +Mobile App – Inventory manager, Order fulfillment system, POS Point of Sale plugin for WordPress is vulnerable to privilege escalation via insecure token-based authentication in all versions up to, and including, 1.11.0. This is due to the plugin trusting a user-supplied...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/04/14 4:45 a.m.115 views

Vulnerable-Web-App-Scanner

Vulnerable-Web-App-Scanner Pent...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2019-25695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting malicious input into the GUI Preferences...

8.6CVSS6.6AI score0.00191EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2026/04/13 12:00 a.m.13 views

Marimo Vulnerable Version Scanner

Marimo versions prior to 0.23.0 suffer from a remote code execution vulnerability. This tool scans the version to see if your installation is susceptible but does not provide any exploitation functionality...

9.3CVSS6.4AI score0.98945EPSS
SaveExploits25
GithubExploit
GithubExploit
added 2026/04/12 8:59 p.m.130 views

SkillCyberPunk

Security Vulnerability Scanner A Claude Code plugin that auto...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/04/12 7:27 p.m.133 views

web-pentest-tool

🛡️ AutoPenTest — Automated Penetration Testing Tool ⚠️ DI...

5.8AI score
SaveExploits0
Wolfi
Wolfi
added 2026/04/11 2:51 a.m.19 views

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: grafana-agent-operator, newrelic-fluent-bit-output, flux-image-reflector-controller, tailscale, secrets-store-csi-driver-provider-azure, ko, cert-manager, crossplane-provider-sql, aws-flb-kinesis, newrelic-infrastructure-agent, kine, prometheus-adapter, scorecard,...

5.9AI score
SaveExploits0
Rows per page
Query Builder