EUVD-2025-50509

Malicious code in conservativesparrowz3n npm...

EUVD-2025-50124

Malicious code in genuinesparrowz3n npm...

EUVD-2025-50595

Malicious code in centralsparrowz3n npm...

Malicious code in genuine_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0bb4e27cfd9c0b2e09bb61007cb22001af3f827c9005319c4f604f331186d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49794

Malicious code in mixedsparrowz3n npm...

EUVD-2025-50006

Malicious code in inclinedsparrowz3n npm...

Malicious code in mixed_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53ba118b247d8e9cdc91f89340a97f30a9771f38e85ce99fc78b124e373d518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-45453

Malicious code in roughsparrowz3n npm...

EUVD-2025-47598

Malicious code in foolishsparrowz3n npm...

EUVD-2025-45877

Malicious code in outsidesparrowz3n npm...

Malicious code in outside_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab1819229a372b3a7d16974f704a6185f317f12493849b0ec6555038910638a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-59409

Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials testflck stored in cleartext in production firmware...

EUVD-2025-32193

Malicious code in bioql PyPI...

EUVD-2022-34050

Malicious code in bioql PyPI...

PT-2025-40414

Name of the Vulnerable Software and Affected Versions Flock Safety Falcon and Sparrow License Plate Readers version OPM1.171019.026 Description The devices ship with development Wi-Fi credentials specifically, test flck stored in cleartext within the production firmware. This could allow...

Iran Slows Internet to Prevent Cyber Attacks Amid Escalating Regional Conflict

Iran has throttled internet access in the country in a purported attempt to hamper Israel's ability to conduct covert cyber operations, days after the latter launched an unprecedented attack on the country, escalating geopolitical tensions in the region. Fatemeh Mohajerani, the spokesperson of th...

CVE-2022-29728

Survey Sparrow Enterprise Survey Software 2022 has a Reflected cross-site scripting XSS vulnerability in the test parameter...

CVE-2022-29727

Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting XSS vulnerability in the Signup parameter...

WordPress Reviews Feed plugin <= 1.1.2 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Sajjad Ahmad jacksparrow in WordPress Plugin Reviews Feed versions = 1.1.2...

WordPress Sparrow: Product Reviews and Ratings for WooCommerce Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Sparrow: Product Reviews and Ratings for WooCommerce Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f8b45251649e Credi...