EUVD-2008-5770

Malware in sbrugna...

Malicious code in banana-uns-project (npm)

The package banana-uns-project was found to contain malicious code...

Malicious code in zucchini-uns-project (npm)

The package zucchini-uns-project was found to contain malicious code...

MAL-2025-41129 Malicious code in zucchini-uns-project (npm)

The package zucchini-uns-project was found to contain malicious code...

MAL-2025-15428 Malicious code in banana-uns-project (npm)

The package banana-uns-project was found to contain malicious code...

MAL-2025-10544 Malicious code in @zalastax/nolb-_uns (npm)

The package @zalastax/nolb-uns was found to contain malicious code...

Malicious code in @zalastax/nolb-_uns (npm)

The package @zalastax/nolb-uns was found to contain malicious code...

Crypto Scam App Disguised as WalletConnect Steals $70K in Five-Month Campaign

Cybersecurity researchers have discovered a malicious Android app on the Google Play Store that enabled the threat actors behind it to steal approximately $70,000 in cryptocurrency from victims over a period of nearly five months. The dodgy app, identified by Check Point, masqueraded as the...

Pre-Play Vulnerability Allows Chip-and-PIN Payment Card Cloning

In March this year, we reported that the major card distributor companies, VISA and Mastercard are migrating to EMV chip cards, also known as PIN-and-Chip cards. Unlike traditional magnetic stripe payment cards, EMV chip cards generates a unique code for every transaction, making it nearly...

Cross site scripting

Cross-site scripting XSS vulnerability in the Wir ber uns fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-5799

CVE-2008-5799 is an XSS vulnerability in the TYPO3 extension Wir ber uns (fsmi_people) version 0.0.24 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to NVD, the impact is partial integrity with no confidentiality/availabili...

CVE-2008-5799

Cross-site scripting XSS vulnerability in the Wir ber uns fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-5800

CVE-2008-5800 refers to a SQL injection vulnerability in the TYPO3 extension fsmi_people (Wir ber uns) version 0.0.24 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The NVD entry lists a Base Score of 7.5 (HIGH) with network attack vector,...

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: "advcalendar" advCalendar, "CMS Poll system" cmspoll, "eLuna Page Comments" elunapagecomments, "Wir ber uns" sic fsmipeople, "Dictionary" rtgdictionary Please read first: This Collective Security Bulletin CSB i...