56 matches found
MAL-2025-68987 Malicious code in isolated-ivory-tapir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035137c5f949e0edb6de5406b68eb04eed3ade1f082867bb13f2d684676b80b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53662
Malicious code in isolated-ivory-tapir npm...
EUVD-2025-52262
Malicious code in right-black-tapir npm...
EUVD-2025-49783
Malicious code in moleculartapirz3n npm...
Malicious code in civil_tapir_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b19e46613b1422f7a604999cb802ad5f908f881daa344fe2ce9cb7749dbe9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2024-53435
Malicious code in bioql PyPI...
CVE-2024-56802
Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...
CVE-2024-56802
Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...
CVE-2024-56802 Tapir allows DeployKey exposure
Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...
CVE-2024-56802 Tapir allows DeployKey exposure
Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...
CVE-2024-56802
Tapir (private Terraform registry) exposed a vulnerability in versions 0.9.0 and 0.9.1 where scope-able Deploykeys could be guessed, granting write access to the registry. Root cause: deployment keys with insufficient entropy/validation allowed unauthorized write capabilities. Impact: potential u...
PT-2024-37076 · Tapir · Tapir
Name of the Vulnerable Software and Affected Versions: Tapir versions 0.9.0 through 0.9.1 Description: Tapir is a private Terraform registry. The issue concerns scope-able Deploykeys, where attackers can guess the key to gain write access to the registry. Recommendations: For versions 0.9.0 and...
Tapir 授权问题漏洞
Tapir is a private Terraform registry for PacoVK individual developers. An authorization issue vulnerability exists in Tapir version 0.9.0 and 0.9.1. An attacker exploiting this vulnerability could guess keys to gain write access to the registry...
tapir-store.de XSS vulnerability
Open Bug Bounty ID: OBB-692033 Description| Value ---|--- Affected Website:| tapir-store.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
tapir-store.de XSS vulnerability
Vulnerable URL: https://www.tapir-store.de/user/account.html Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 575885 VIP website status:| No Check tapir-store.d...
tapir-store.de XSS vulnerability
Open Bug Bounty ID: OBB-221494 Description| Value ---|--- Affected Website:| tapir-store.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...