@powersync/cli-core (>=0.0.0-dev-20260305082615, <=0.9.2), @powersync/cli-plugin-config-edit (>=0.0.0-dev-20260305082615, <=0.9.2) +12 more potentially affected by CVE-2026-30870 via @powersync/service-core (1.20.0)

@powersync/service-core NPM version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on @powersync/service-core and may be impacted: - @powersync/cli-core =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615,...

EUVD-2019-16700

Malware in sbrugna...

EUVD-2014-9329

Malware in sbrugna...

Malicious code in nit-quotation-service-core-lib (npm)

The package nit-quotation-service-core-lib was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-27563 Malicious code in nit-template-service-core-lib (npm)

The package nit-template-service-core-lib was found to contain malicious code...

Malicious code in nit-template-service-core-lib (npm)

The package nit-template-service-core-lib was found to contain malicious code...

Cross site scripting

Cross-site scripting XSS vulnerability in BMC Footprints Service Core 11.5...

CVE-2014-9514

Cross-site scripting XSS vulnerability in BMC Footprints Service Core 11.5...

CVE-2014-9514

BMC Footprints Service Core 11.5 is affected by a cross-site scripting (XSS) vulnerability in its web UI. CNVD-2017-30588 states that a remote attacker can exploit this to inject arbitrary web script or HTML. The NVD entry confirms XSS in Footprints Service Core 11.5. No remediation details are p...

CVE-2014-9514

Cross-site scripting XSS vulnerability in BMC Footprints Service Core 11.5...

BMC Footprints Service Core 11.5 Cross Site Scripting

About the Product: BMC FootPrints Service Core is an IT service and asset management platform used by many organizations to help the IT departments deliver more value to businesses. Advisory Details: During a Penetration testing, Help AG auditor Ayman Abdelaziz discovered the following: 1 Stored...