MAL-2026-10478 Malicious code in @sectest429/hello-npm-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479b9303d76a49dfacb402f0a906e32686b5d276e23f429678150e73e506550d The package advertises a single function module.exports = function helloname but ships a preinstall.js lifecycle script that runs automatically on np...

Malicious Package

Overview supplychain-security-demo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in supplychain-security-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2655712e00f8c5bf90b5a945bc60c2fd3c109d2719ec7b161114f86343741ee1 The package supplychain-security-demo was found to contain malicious code. Source: ghsa-malware...

org.jboss.errai:errai-security-demo (>=3.1.0.cr1, <=3.1.0.final), org.jboss.errai:errai-security-keycloak (>=3.1.0.cr1, <=3.1.0.final) +41 more potentially affected by CVE-2024-7260 via org.keycloak:keycloak-core (1.0-beta-2)

org.keycloak:keycloak-core MAVEN version 1.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.errai:errai-security-demo =3.1.0.cr1, =3.1.0.cr1, =3.1.0.final -...

org.jboss.errai:errai-security-demo (>=3.1.0.cr1, <=3.1.0.final), org.jboss.errai:errai-security-keycloak (>=3.1.0.cr1, <=3.1.0.final) +41 more potentially affected by CVE-2023-1664 via org.keycloak:keycloak-core (1.0-beta-2)

org.keycloak:keycloak-core MAVEN version 1.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.errai:errai-security-demo =3.1.0.cr1, =3.1.0.cr1, =3.1.0.final -...

org.jboss.errai:errai-security-demo (>=3.1.0.cr1, <=3.1.0.final), org.jboss.errai:errai-security-keycloak (>=3.1.0.cr1, <=3.1.0.final) +41 more potentially affected by CVE-2022-1466 via org.keycloak:keycloak-core (1.0-beta-2)

org.keycloak:keycloak-core MAVEN version 1.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.errai:errai-security-demo =3.1.0.cr1, =3.1.0.cr1, =3.1.0.final -...

org.jboss.errai:errai-security-demo (>=3.1.0.cr1, <=3.1.0.final), org.jboss.errai:errai-security-keycloak (>=3.1.0.cr1, <=3.1.0.final) +41 more potentially affected by CVE-2020-1744 via org.keycloak:keycloak-core (1.0-beta-2)

org.keycloak:keycloak-core MAVEN version 1.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.errai:errai-security-demo =3.1.0.cr1, =3.1.0.cr1, =3.1.0.final -...

org.jboss.errai:errai-security-demo (>=3.1.0.cr1, <=3.1.0.final), org.jboss.errai:errai-security-keycloak (>=3.1.0.cr1, <=3.1.0.final) +41 more potentially affected by CVE-2020-1731 via org.keycloak:keycloak-core (1.0-beta-2)

org.keycloak:keycloak-core MAVEN version 1.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.errai:errai-security-demo =3.1.0.cr1, =3.1.0.cr1, =3.1.0.final -...

CVE-2020-10119

cPanel before 84.0.20 allows a demo account to achieve remote code execution via a cpsrvd rsync shell SEC-544...

CVE-2017-18446

cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API SEC-250...

ECG practical Demo - Possible privilege escalation, Runtime command execution, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application ECG practical Demo published at the 'play' market has multiple vulnerabilities...

IE6 / Provideo Camimage (ISSCamControl.dll 1.0.1.5) Remote BoF Exploit

Exploit for unknown platform in category remote exploits ====================================================================== IE6 / Provideo Camimage ISSCamControl.dll 1.0.1.5 Remote BoF Exploit ====================================================================== REM metasploit one, add a use...