Lucene search
+L

22 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/12/05 2:52 a.m.•18 views

Malicious code in react-svg-supporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2d6b643ae6f9563baf5e18621fe86ff8f764a2254785e2300c96aa397a0bc The package react-svg-supporter was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/12/05 2:52 a.m.•14 views

MAL-2025-192314 Malicious code in react-svg-supporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2d6b643ae6f9563baf5e18621fe86ff8f764a2254785e2300c96aa397a0bc The package react-svg-supporter was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/12/05 2:52 a.m.•20 views

EUVD-2025-201328

Malicious code in react-svg-supporter npm...

6.6AI score
SaveExploits0References1
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•21 views

Malicious Package

Overview react-svg-supporter is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this...

9.8CVSS7.2AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-33217

Malicious code in bioql PyPI...

4.4CVSS5.3AI score0.00246EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2025/06/09 9:30 p.m.•5 views

@tarojs/rn-runner (>=4.0.0-alpha.0, <=4.1.2-alpha.2), @tarojs/rn-style-transformer (>=4.0.0-alpha.0, <=4.1.2-alpha.2) +2 more potentially affected by CVE-2025-5896 via taro-css-to-react-native (>=4.0.0-alpha.0, <=4.1.2-alpha.2)

taro-css-to-react-native NPM version =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.1.2-alpha.2 Source cves: CVE-2025-5896 Source advisory: OSV:GHSA-F5XG-CFPJ-2MW6...

7.5CVSS5.3AI score0.00622EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:43 p.m.•19 views

CVE-2022-28778

Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as Secret Folder without Samsung Security Supporter permission...

4.4CVSS5.5AI score0.00246EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/04/12 12:00 a.m.•139 views

Samsung Security Supporter Access Control Error Vulnerability

Samsung Security Supporter is a Samsung built-in security support from Samsung, Korea.An access control error vulnerability exists in versions prior to Samsung Security Supporter 1.2.40.0, which stems from the presence of faulty access authentication logic. An attacker could exploit this...

4.4CVSS2.2AI score0.00246EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/04/11 8:15 p.m.•17 views

CVE-2022-28778

Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as Secret Folder without Samsung Security Supporter permission...

3.3CVSS5.9AI score0.00246EPSS
SaveExploits0References1
NVD
NVD
•added 2022/04/11 8:15 p.m.•39 views

CVE-2022-28778

Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as Secret Folder without Samsung Security Supporter permission...

4.4CVSS0.00246EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/11 8:15 p.m.•26 views

CVE-2022-28778

Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as Secret Folder without Samsung Security Supporter permission...

4.4CVSS6AI score0.00246EPSS
SaveExploits0References2
Prion
Prion
•added 2022/04/11 8:15 p.m.•26 views

Improper access control

Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as Secret Folder without Samsung Security Supporter permission...

2.1CVSS4.2AI score0.00246EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/04/11 7:37 p.m.•42 views

CVE-2022-28778

Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as Secret Folder without Samsung Security Supporter permission...

4.4CVSS5.1AI score0.00246EPSS
SaveExploits0References1
CVE
CVE
•added 2022/04/11 7:37 p.m.•104 views

CVE-2022-28778

CVE-2022-28778 : Samsung Security Supporter versions prior to 1.2.40.0 have an improper access control vulnerability that allows an attacker to set an arbitrary folder as a Secret Folder without Samsung Security Supporter permission. This is a local access issue with potential impact on integrity...

4.4CVSS4.2AI score0.00246EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/11 12:00 a.m.•6 views

CVE-2022-28778: Improper Access Control

Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as Secret Folder without Samsung Security Supporter permission...

4.4CVSS5.7AI score0.00246EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/04/11 12:00 a.m.•18 views

PT-2022-19226 · Samsung · Samsung Security Supporter

Name of the Vulnerable Software and Affected Versions: Samsung Security Supporter versions prior to 1.2.40.0 Description: The issue is related to improper access control, allowing an attacker to set an arbitrary folder as a Secret Folder without the necessary permission from Samsung Security...

4.4CVSS4.1AI score0.00246EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/04/11 12:00 a.m.•18 views

Samsung Security Supporter – Security Vulnerabilities

Samsung Security Supporter is a Samsung built-in security support from Samsung, Korea.An access control error vulnerability exists in versions prior to Samsung Security Supporter 1.2.40.0, which stems from the presence of faulty access authentication logic. An attacker could exploit this...

4.4CVSS5.6AI score0.00246EPSS
SaveExploits0References2
Hacker One
Hacker One
•added 2021/12/11 9:27 a.m.•48 views

FetLife: Able to detect if a user is FetLife supporter although this user hides their support badge in fetlife.com/conversations/{id} JSON response

UserA is a FetLife supporter, he also hides his support badge in his account privacy setting so that people don't know he is a supporter. However, UserB can start a conversation with userA, and by looking at issupporter field in JSON response of their conversation . UserB knows that UserA is a...

6.5AI score
SaveExploits0
Hacker One
Hacker One
•added 2020/07/06 7:27 p.m.•69 views

InnoGames: Stored XSS on recruit.innogames.de

Summary: When applying for a Supporter/Moderator job at recruit.innogames.de the drop-down field "Position" is vulnerable to a stored XSS as the content is not validated. Description: Steps To Reproduce: 1. Visit https://recruit.innogames.de/staemme/de/index/page/show/apply 2. Fill out all requir...

0.5AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2012/11/07 1:27 p.m.•13 views

Anonymous hacker arrested for attacking Home Secretary website

In the UK a 41-year-old man has been arrested over a cyber attack on the website of the British Home Secretary Theresa May. He was arrested in a joint operation by Scotland Yard and local officers on Tuesday morning in Wedgewood Road. The man, who has not been named, was arrested on suspicion of...

6.7AI score
SaveExploits0
Rows per page
Query Builder