56 matches found
EUVD-2025-53662
Malicious code in isolated-ivory-tapir npm...
EUVD-2025-52344
Malicious code in religious-yellow-tapir npm...
EUVD-2025-52262
Malicious code in right-black-tapir npm...
EUVD-2025-49783
Malicious code in moleculartapirz3n npm...
Malicious code in civil_tapir_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b19e46613b1422f7a604999cb802ad5f908f881daa344fe2ce9cb7749dbe9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2024-53435
Malicious code in bioql PyPI...
CVE-2024-56802
Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...
CVE-2024-56802
Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...
CVE-2024-56802 Tapir allows DeployKey exposure
Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...
CVE-2024-56802 Tapir allows DeployKey exposure
Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2...
CVE-2024-56802
Tapir (private Terraform registry) exposed a vulnerability in versions 0.9.0 and 0.9.1 where scope-able Deploykeys could be guessed, granting write access to the registry. Root cause: deployment keys with insufficient entropy/validation allowed unauthorized write capabilities. Impact: potential u...
Tapir 授权问题漏洞
Tapir is a private Terraform registry for PacoVK individual developers. An authorization issue vulnerability exists in Tapir version 0.9.0 and 0.9.1. An attacker exploiting this vulnerability could guess keys to gain write access to the registry...
PT-2024-37076 · Tapir · Tapir
Name of the Vulnerable Software and Affected Versions: Tapir versions 0.9.0 through 0.9.1 Description: Tapir is a private Terraform registry. The issue concerns scope-able Deploykeys, where attackers can guess the key to gain write access to the registry. Recommendations: For versions 0.9.0 and...
tapir-store.de XSS vulnerability
Open Bug Bounty ID: OBB-692033 Description| Value ---|--- Affected Website:| tapir-store.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
tapir-store.de XSS vulnerability
Vulnerable URL: https://www.tapir-store.de/user/account.html Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 575885 VIP website status:| No Check tapir-store.d...
tapir-store.de XSS vulnerability
Open Bug Bounty ID: OBB-221494 Description| Value ---|--- Affected Website:| tapir-store.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...