Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2025/05/30 1:05 a.m.•3 views

Malware in transaction-report

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/30 4:55 p.m.•6 views

Malicious code in transaction-report (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c40d933bc68a269e1fe8750bef686c53bbc78251b864aec8d83093a175fcac Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References3
OSV
OSV
•added 2025/01/30 4:55 p.m.•11 views

MAL-2025-693 Malicious code in transaction-report (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c40d933bc68a269e1fe8750bef686c53bbc78251b864aec8d83093a175fcac Any computer that has this package installed or running should be considered...

7AI score
SaveExploits0References3
OSV
OSV
•added 2008/09/15 3:14 p.m.•18 views

DEBIAN-CVE-2008-4078

SQL injection vulnerability in the AR/AP transaction report in 1 LedgerSMB LSMB before 1.2.15 and 2 SQL-Ledger 2.8.17 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS8.5AI score0.01624EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/09/15 12:00 a.m.•6 views

CVE-2008-4078: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the AR/AP transaction report in 1 LedgerSMB LSMB before 1.2.15 and 2 SQL-Ledger 2.8.17 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS6.4AI score0.01624EPSS
SaveExploits0References2
Rows per page
Query Builder