17 matches found
EUVD-2022-44398
Malicious code in bioql PyPI...
Malicious code in @zalastax/nolb-_serp (npm)
The package @zalastax/nolb-serp was found to contain malicious code...
MAL-2025-10412 Malicious code in @zalastax/nolb-_serp (npm)
The package @zalastax/nolb-serp was found to contain malicious code...
CVE-2022-41157
A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...
Malicious code in szn-search-mlops-serp-downloader (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8e35cfed38428b7a513be4c205127136c3ff4884fd2045b3ad9026c9569068c7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-3005 Malicious code in szn-search-mlops-serp-downloader (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8e35cfed38428b7a513be4c205127136c3ff4884fd2045b3ad9026c9569068c7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2023-23819
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Rolands Umbrovskis itemprop WP for SERP/SEO Rich snippets plugin = 3.5.201706131 versions...
CVE-2023-23819
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Rolands Umbrovskis itemprop WP for SERP/SEO Rich snippets plugin = 3.5.201706131 versions...
CVE-2023-23819 WordPress itemprop WP for SERP/SEO Rich snippets Plugin <= 3.5.201706131 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Rolands Umbrovskis itemprop WP for SERP/SEO Rich snippets plugin = 3.5.201706131 versions...
CVE-2023-23819
CVE-2023-23819 refers to a Stored XSS in the WordPress plugin “itemprop WP for SERP/SEO Rich snippets” (itempropwp). Affected versions are
Malicious Package
Overview eslint-plugin-hermione-serp is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...
Malicious code in eslint-plugin-hermione-serp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7d7f41a51ee9bfecbef8bf69e148220d60868373587d28c800ac1acb3e0112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-313 Malicious code in eslint-plugin-hermione-serp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7d7f41a51ee9bfecbef8bf69e148220d60868373587d28c800ac1acb3e0112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-41157
A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...
Design/Logic Flaw
A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...
sERP Server 信任管理问题漏洞
sERP Server is an enterprise management application from the Korean company sERP. A security vulnerability exists in sERP Server version 2.0 prior to 20.2.170, which stems from a fixed password that could allow an attacker to disclose/steal sensitive information or execute malicious commands if...
How to Run Google SERP API Without Constantly Changing Proxy Servers
You've probably run into a major problem when trying to scrape Google search results. Web scraping tools allow you to extract information from a web page. Companies and coders from across the world use them to download Google's SERP data. And they work well – for a little while. After several...