Malicious code in spectro-cloud-docs (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5f48697cbdd8e8f64a4634d5d8ea37633a9f97394cf53ceac7d2e6a05fb41e Any computer that has this package install...

MAL-2023-8700 Malicious code in spectro-cloud-docs (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5f48697cbdd8e8f64a4634d5d8ea37633a9f97394cf53ceac7d2e6a05fb41e Any computer that has this package install...

spectro.com Cross Site Scripting vulnerability OBB-2218950

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

www2.spectro.com XSS vulnerability

Vulnerable URL: http://www2.spectro.com/pages/appc/contentmanager/page.php?ID=277037=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...