CVE-2025-41107

Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...

EUVD-2025-74233

Malicious code in smartmolegreen-24 npm...

MAL-2025-112319 Malicious code in smart_mole_green-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992e89915cfaa0d9c0c9c3c45f1ca1a98fe16b0d62a1fab6fd9b220ed8a088c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75605

Malicious code in smartantlion-silentdev npm...

EUVD-2025-75606

Malicious code in smartalpaca-appteadev npm...

EUVD-2025-75603

Malicious code in smartrattlesnake-tool npm...

MAL-2025-108857 Malicious code in smart_alpaca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d4319d72fb4e34ae2a67e415f75137a1d8f6dae2110c2460f1f01f1a8eb66c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78288

Malicious code in smartstorkz3n npm...

Malicious code in smart_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637ea0af56c989a786d3ebd129493b1c7069d185f6339fac294b5726168675e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78289

Malicious code in smartleopardz3n npm...

EUVD-2025-71354

Malicious code in smartperchz3n npm...

EUVD-2025-66557

Malicious code in smartbarnaclez3n npm...

EUVD-2025-66556

Malicious code in smartlemurz3n npm...

EUVD-2025-51962

Malicious code in smart-apricot-gayal npm...

EUVD-2025-51961

Malicious code in smart-beige-firefly npm...

EUVD-2025-51960

Malicious code in smart-jade-capybara npm...

Malicious code in smart-jade-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d81d73f188506c50c60d95ebc4e8f4c201a38961f852006ae6f90bf769268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51959

Malicious code in smart-sapphire-alligator npm...

EUVD-2025-57238

Malicious code in smartfireflyz3n npm...

WordPress plugin smart SEO SQL injection vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin smart SEO suffers from a SQL injection vulnerability that stems from the...