Lucene search
+L

8 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•3 views

Malicious code in node-unified-login-url (npm)

The package node-unified-login-url was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•2 views

MAL-2025-27661 Malicious code in node-unified-login-url (npm)

The package node-unified-login-url was found to contain malicious code...

7.2AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2025/04/30 9:12 a.m.•1 views

Malware in unified-login-url

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/30 9:12 a.m.•5 views

Malicious code in unified-login-url (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c824326fc0b6e80e3de9e7c838981c72c6b14fce17d41792db6a4e831bc8786d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/24 8:10 p.m.•4 views

Malicious code in digital-retail-falabella-unified-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 147f64482f11e5d69326b68fb5d8644d9df7c3073481cdac8e2b81176acfe6d3 The OpenSSF Package Analysis project identified 'digital-retail-falabella-unified-login' @ 1.0.0 npm as malicious. It is considered malicious...

7.2AI score
SaveExploits0
CVE
CVE
•added 2014/12/10 8:00 p.m.•52 views

CVE-2014-9364

CVE-2014-9364 corresponds to a Cross-Site Scripting (XSS) vulnerability in the Unified Login form of the Drupal LoginToboggan module (7.x-1.x) older than 7.x-1.4. The issue allows remote attackers to inject arbitrary web script/HTML via unspecified vectors. The Drupal advisory SA-CONTRIB-2014-069...

4.3CVSS5.9AI score0.00931EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/12/10 12:00 a.m.•5 views

CVE-2014-9364: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Unified Login form in the LoginToboggan module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.00931EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/12/10 12:00 a.m.•2 views

PT-2014-8963

Name of the Vulnerable Software and Affected Versions Drupal LoginToboggan module versions 7.x-1.x before 7.x-1.4 Description A cross-site scripting XSS issue exists in the Unified Login form of the LoginToboggan module, allowing remote attackers to inject arbitrary web script or HTML...

4.3CVSS0.00931EPSS
SaveExploits0References3
Rows per page
Query Builder