MAL-2025-27724 Malicious code in norma-pegasus-start-sublimation (npm)

The package norma-pegasus-start-sublimation was found to contain malicious code...

MAL-2025-17730 Malicious code in cryonics-sublimation-transform-pegasus (npm)

The package cryonics-sublimation-transform-pegasus was found to contain malicious code...

MAL-2025-27091 Malicious code in native-wavefunction-sublimation-mechatronics (npm)

The package native-wavefunction-sublimation-mechatronics was found to contain malicious code...

MAL-2025-24092 Malicious code in juno-photon-nebula-sublimation (npm)

The package juno-photon-nebula-sublimation was found to contain malicious code...

MAL-2025-34142 Malicious code in sublimation-radiant-less-loader-ablation (npm)

The package sublimation-radiant-less-loader-ablation was found to contain malicious code...

MAL-2025-34141 Malicious code in sublimation-ionosphere-quasar-darkmatter (npm)

The package sublimation-ionosphere-quasar-darkmatter was found to contain malicious code...

MAL-2025-34140 Malicious code in sublimation-docusaurus-hermes-avior (npm)

The package sublimation-docusaurus-hermes-avior was found to contain malicious code...

MAL-2025-32359 Malicious code in rollup-plugin-graviton-library-sublimation (npm)

The package rollup-plugin-graviton-library-sublimation was found to contain malicious code...

MAL-2025-34144 Malicious code in sublimation-toml-cluster-gridsome (npm)

The package sublimation-toml-cluster-gridsome was found to contain malicious code...

noodles.com Cross Site Scripting vulnerability OBB-2615214

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

madeirabeachfl.gov Cross Site Scripting vulnerability OBB-2600350

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cityofmebanenc.gov Cross Site Scripting vulnerability OBB-2600349

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bedfordoh.gov Cross Site Scripting vulnerability OBB-2600340

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

loomis.ca.gov Cross Site Scripting vulnerability OBB-2600326

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

santa-ana.org Cross Site Scripting vulnerability OBB-2600325

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Sublimation ePass app has a flawed logic vulnerability

The College eConnect app is a tutorial app for high school students. A logic flaw vulnerability exists in the Study eNET app, which can be exploited by an attacker to obtain sensitive information about the app...