138 matches found
CVE-2018-10097
XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...
EUVD-2008-6072
Malware in sbrugna...
EUVD-2004-2184
Malware in sbrugna...
EUVD-2014-5884
Malware in sbrugna...
EUVD-2004-2009
Malware in sbrugna...
EUVD-2008-0698
Malware in sbrugna...
EUVD-2008-3015
Malware in sbrugna...
EUVD-2004-2183
Malware in sbrugna...
EUVD-2018-2176
Malware in sbrugna...
Malicious code in champion-trader (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a12ee286d5987c604b6598557a7a9d8ed03564366dccc6227f87d58a9ac5c171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1513 Malicious code in champion-trader (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a12ee286d5987c604b6598557a7a9d8ed03564366dccc6227f87d58a9ac5c171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerabilities of the software platforms Cleo Harmony, VLTrader, and LexiCom are related to errors in the use of standard permissions, allowing a perpetrator to execute arbitrary commands.
The vulnerabilities of the software platforms Cleo Harmony, VLTrader, and LexiCom are related to errors in the use of standard permissions. Exploiting these vulnerabilities can allow a remote attacker to execute arbitrary commands...
Cleo多款产品 安全漏洞
Cleo LexiCom and others are products of Cleo, Inc.Cleo LexiCom is an integration platform.Cleo Harmony is a file integration solution.Cleo VLTrader is a secure hosted file transfer software. A security vulnerability exists in various Cleo products that stems from the inclusion of a JavaScript...
Symphony XTS Web Trader 安全漏洞
Symphony XTS Web Trader is an advanced HTML5-based trading platform from Symphony. A security vulnerability exists in Symphony XTS Web Trader version 2.0.0.1P160 that stems from improper access control to the API. A remote attacker can exploit the vulnerability to manipulate parameters via HTTP...
Symphony XTS Web Trader 安全漏洞
Symphony XTS Web Trader is an advanced HTML5-based trading platform from Symphony. A security vulnerability exists in Symphony XTS Web Trader version 2.0.0.1P160, which stems from improper access control to the API. A remote attacker could exploit the vulnerability to manipulate parameters via HT...
trader-online.de Cross Site Scripting vulnerability OBB-3925145
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
chevynovatrader.com Cross Site Scripting vulnerability OBB-3854450
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
houston.texasguntrader.com Cross Site Scripting vulnerability OBB-3506154
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
tyler.texasguntrader.com Cross Site Scripting vulnerability OBB-3480050
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
North Korean Hacker Group Andariel Strikes with New EarlyRat Malware
The North Korea-aligned threat actor known as Andariel leveraged a previously undocumented malware called EarlyRat in phishing attacks, adding another piece to the group's wide-ranging toolset. "Andariel infects machines by executing a Log4j exploit, which, in turn, downloads further malware from...