Lucene search
+L

43 matches found

OSV
OSV
added 2026/08/05 6:08 p.m.16 views

MAL-2026-13366 Malicious code in @workoscalif/sudoku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6502011179b6d16c43f982d5d7bfb08feec7470444be52a5a3547cfafe0e217 package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during npm install. The README describes this file as a 34 kB static...

5.7AI score
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/05 6:08 p.m.134 views

Malicious code in @workoscalif/sudoku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6502011179b6d16c43f982d5d7bfb08feec7470444be52a5a3547cfafe0e217 package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during npm install. The README describes this file as a 34 kB static...

5.6AI score
SaveExploits0References6
NVD
NVD
added 2026/07/10 5:16 a.m.18 views

CVE-2026-15292

The Sudoku Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background' parameter in the 'sudoku-sc' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS0.00331EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/10 4:31 a.m.11 views

CVE-2026-15292

The Sudoku Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background' parameter in the 'sudoku-sc' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS6.1AI score0.00331EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/10 4:31 a.m.43 views

CVE-2026-15292 Sudoku Shortcode <= 1.0.0 - Authenticated (Contributor+) Cross-Site Scripting via 'background' Shortcode Attribute

The Sudoku Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background' parameter in the 'sudoku-sc' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS0.00331EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/10 4:31 a.m.21 views

CVE-2026-15292

The Sudoku Shortcode plugin for WordPress is affected by CVE-2026-15292: Stored Cross-Site Scripting via the background parameter in the sudoku-sc shortcode, in all versions up to and including 1.0.0. Exploitation requires authenticated access at Contributor level or higher, enabling an attacker ...

6.4CVSS6.1AI score0.00331EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/10 4:31 a.m.23 views

EUVD-2026-42801

The Sudoku Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background' parameter in the 'sudoku-sc' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS6.1AI score0.00331EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/10 12:00 a.m.29 views

PT-2026-57069

The Sudoku Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background' parameter in the 'sudoku-sc' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS6.2AI score0.00331EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2026/02/10 11:13 p.m.11 views

WordPress Sudoku Shortcode plugin <= 1.0.0 - Authenticated (Contributor+) Cross-Site Scripting via 'background' Shortcode Attribute vulnerability

Authenticated Contributor+ Cross-Site Scripting via 'background' Shortcode Attribute vulnerability discovered by Gilang - DJ in WordPress Plugin Sudoku Shortcode versions = 1.0.0...

5.4AI score
SaveExploits0References1Affected Software1
Packet Storm News
Packet Storm News
added 2026/01/15 12:00 a.m.9 views

Advanced Encryption Technique for Multimedia Data Using Sudoku-Based Algorithms for Enhanced Security

Encryption and Decryption is the process of sending a message in a ciphered way that appears meaningless and could be deciphered using a key for security purposes to avoid data breaches. This paper expands on the previous work on Sudoku-based encryption methods, applying it to other forms of medi...

6.8AI score
SaveExploits0
Fedora
Fedora
added 2024/05/25 1:11 a.m.16 views

[SECURITY] Fedora 39 Update: libipuz-0.4.6.2-1.fc39

This is a library for parsing .ipuz puzzle files, for crossword puzzles, sudokus, etc. The library only handles crosswords for now...

7.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/03/03 10:50 a.m.9 views

sudoku.name Cross Site Scripting vulnerability OBB-3864154

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/05/06 7:00 a.m.16 views

sudokuoftheday.co.uk Cross Site Scripting vulnerability OBB-3298872

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/03/12 4:31 p.m.11 views

my-sudoku.com Cross Site Scripting vulnerability OBB-3218776

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Openbugbounty
Openbugbounty
added 2020/10/05 1:33 p.m.6 views

daily-sudoku-puzzle.com Cross Site Scripting vulnerability OBB-1383290

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
hackapp
hackapp
added 2016/04/14 7:58 a.m.18 views

Sudoku: Andoku 3 Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sudoku: Andoku 3 Free published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/03 7:34 a.m.23 views

Sudoku Brain - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sudoku Brain published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/03 7:31 a.m.14 views

Sudoku World - Corrupted files, Customized SSL, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application Sudoku World published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:19 a.m.93 views

Sudoku - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sudoku published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:19 a.m.18 views

Sudoku Quest Free - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Sudoku Quest Free published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder