EUVD-2008-5770

Malware in sbrugna...

Malicious code in @zalastax/nolb-_uns (npm)

The package @zalastax/nolb-uns was found to contain malicious code...

MAL-2025-10544 Malicious code in @zalastax/nolb-_uns (npm)

The package @zalastax/nolb-uns was found to contain malicious code...

Malicious code in banana-uns-project (npm)

The package banana-uns-project was found to contain malicious code...

Malicious code in zucchini-uns-project (npm)

The package zucchini-uns-project was found to contain malicious code...

MAL-2025-41129 Malicious code in zucchini-uns-project (npm)

The package zucchini-uns-project was found to contain malicious code...

MAL-2025-15428 Malicious code in banana-uns-project (npm)

The package banana-uns-project was found to contain malicious code...

Crypto Scam App Disguised as WalletConnect Steals $70K in Five-Month Campaign

Cybersecurity researchers have discovered a malicious Android app on the Google Play Store that enabled the threat actors behind it to steal approximately $70,000 in cryptocurrency from victims over a period of nearly five months. The dodgy app, identified by Check Point, masqueraded as the...

Pre-Play Vulnerability Allows Chip-and-PIN Payment Card Cloning

In March this year, we reported that the major card distributor companies, VISA and Mastercard are migrating to EMV chip cards, also known as PIN-and-Chip cards. Unlike traditional magnetic stripe payment cards, EMV chip cards generates a unique code for every transaction, making it nearly...

Cross site scripting

Cross-site scripting XSS vulnerability in the Wir ber uns fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-5799

CVE-2008-5799 is an XSS vulnerability in the TYPO3 extension Wir ber uns (fsmi_people) version 0.0.24 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to NVD, the impact is partial integrity with no confidentiality/availabili...

CVE-2008-5800

CVE-2008-5800 refers to a SQL injection vulnerability in the TYPO3 extension fsmi_people (Wir ber uns) version 0.0.24 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The NVD entry lists a Base Score of 7.5 (HIGH) with network attack vector,...

CVE-2008-5799

Cross-site scripting XSS vulnerability in the Wir ber uns fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: "advcalendar" advCalendar, "CMS Poll system" cmspoll, "eLuna Page Comments" elunapagecomments, "Wir ber uns" sic fsmipeople, "Dictionary" rtgdictionary Please read first: This Collective Security Bulletin CSB i...