CVE-2026-116207 YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API

YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest. Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escap...

EUVD-2026-109465

YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest. Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escap...

CVE-2026-116207

YesWiki versions 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 are vulnerable to an unauthenticated SQL injection within the SearchManager::prepareSearchRequest() function. The root cause is the improper handling of field names from the query and searchfields parameters of the public Ba...

Malicious code in insta-reel-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc584c5e885d66c7d3e895a467192ddd7a40082a2fe2df9ad45d8835ba65c4e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview insta-reel-search is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ionic-youtube-search is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview youtube-search-without-api-key is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

Malicious Package

Overview ionic-insta-search is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in insta-reel-search

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18258 Malicious code in insta-reel-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc584c5e885d66c7d3e895a467192ddd7a40082a2fe2df9ad45d8835ba65c4e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ionic-insta-search

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18262 Malicious code in ionic-youtube-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c081308db3c1e903e04a99672621d70a549e82da4baa7e7624d3960048d93e63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in youtube-search-without-api-key

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ionic-insta-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 407c310ce45465666130259c09efcd3fbcb31a3d0173587bd2c4db6a078cc70a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ionic-youtube-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c081308db3c1e903e04a99672621d70a549e82da4baa7e7624d3960048d93e63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youtube-search-without-api-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64255a9b30bfd083ac86612f2d7307de45dc83a57c42caf459cfb8df21dc2bf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18259 Malicious code in ionic-insta-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 407c310ce45465666130259c09efcd3fbcb31a3d0173587bd2c4db6a078cc70a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18270 Malicious code in youtube-search-without-api-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64255a9b30bfd083ac86612f2d7307de45dc83a57c42caf459cfb8df21dc2bf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ionic-youtube-search

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...