Lucene search
+L

12 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/06/20 11:14 a.m.•15 views

Malicious code in @com.att.dtventertainment/dfw-pm-yo-space-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 806161588999d1c3f730dfe7672f8123c0cd3b6e2b28c00a6463f91ced635766 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/06/20 11:14 a.m.•4 views

Malware in @com.att.dtventertainment/dfw-pm-yo-space-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:10 a.m.•19 views

CVE-2023-39261

In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions...

7.8CVSS7AI score0.00282EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/05 12:00 a.m.•17 views

SolidUI 安全漏洞

SolidUI is an AI-generated graphics software open-sourced by CloudOrc in China. A security vulnerability exists in SolidUI version 0.4.0, which stems from the fact that spaceplugin/app.py leaks OpenAI keys...

7.5CVSS6.8AI score0.00502EPSS
SaveExploits0References2
OSV
OSV
•added 2024/02/06 10:15 a.m.•20 views

CVE-2024-24941

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL...

5.3CVSS5.8AI score0.00315EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/06 12:00 a.m.•8 views

CVE-2024-24941: Improper Input Validation

In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL...

6.1CVSS5.8AI score0.00315EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/01/19 12:00 a.m.•32 views

JetBrains IntelliJ IDEA < 2023.2 Execution with Unnecessary Privileges (macOS)

The version of JetBrains IntelliJ IDEA installed on the remote macOS host is prior to 2023.2 It is, therefore, affected by an execution with unnecessary privileges vulnerability, due to the bundled Space plugin requesting excessive permissions. An authenticated, local attacker could exploit this...

7.8CVSS7AI score0.00282EPSS
SaveExploits0References2
OSV
OSV
•added 2023/07/26 1:15 p.m.•18 views

CVE-2023-39261

In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions...

7.8CVSS5.8AI score0.00282EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/26 1:15 p.m.•28 views

CVE-2023-39261

In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions...

7.8CVSS6AI score0.00282EPSS
SaveExploits0References1
Prion
Prion
•added 2023/07/26 1:15 p.m.•34 views

Code injection

In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions...

4.3CVSS7.7AI score0.00282EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/07/26 12:00 a.m.•18 views

JetBrains IntelliJ IDEA 安全漏洞

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2023.2, which stems from an issue with the Space plugin requesting too many permissions...

7.8CVSS7.3AI score0.00282EPSS
SaveExploits0References2
CNVD
CNVD
•added 2015/05/20 12:00 a.m.•11 views

WordPress Citizen Space Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Citizen Space plugin, which allows remote attackers to exploit the vulnerability to inject malicious...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder