Lucene search
+L

11 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:50 p.m.•11 views

Malicious code in meechum-user-lib-js (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/06/25 12:50 p.m.•13 views

MAL-2024-2656 Malicious code in meechum-user-lib-js (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2023/09/05 6:44 a.m.•4 views

Malware in metronome-synth-user-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2023/09/05 6:44 a.m.•3 views

Malware in vesper-synth-user-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/09/02 3:49 p.m.•12 views

Malicious code in vesper-synth-user-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b63b940eccf15e831893fd295775cbbbee43515d20e431b70389d8775292f57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/09/02 3:49 p.m.•25 views

MAL-2023-7989 Malicious code in vesper-synth-user-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b63b940eccf15e831893fd295775cbbbee43515d20e431b70389d8775292f57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
CNVD
CNVD
•added 2015/07/22 12:00 a.m.•21 views

Moodle 'user/lib.php' Cross-Site Scripting Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site scripting vulnerability exists in Moodle that stems from the program's...

6.1CVSS6.7AI score0.01465EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/22 12:00 a.m.•7 views

CVE-2007-2166: Undefined Security Weakness

PHP remote file inclusion vulnerability in administration/user/lib/group.inc.php in OpenSurveyPilot osp 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgPathToProjectAdmin parameter...

6.8CVSS6.4AI score0.03222EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2007/04/03 12:00 a.m.•54 views

CVE-2006-7188

The search function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to read internal forum posts via certain requests, possibly related to the $info'forum' variable...

6.7AI score0.01064EPSS
SaveExploits0References2
CVE
CVE
•added 2007/04/03 12:00 a.m.•74 views

CVE-2006-7188

The CVE-2006-7188 entry concerns WebAPP by web-app.net. Affected component: the search.pl in cgi-lib/user-lib. Before 20060909, remote attackers could read internal forum posts by crafting certain requests, with the issue possibly tied to the $info{'forum'} variable. The provided sources confirm ...

5CVSS6.7AI score0.01064EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/03 12:00 a.m.•8 views

CVE-2006-7190: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the viewnews function, related to use of doubbctopic instead of doubbc...

4.3CVSS6.1AI score0.00845EPSS
SaveExploits0References1
Rows per page
Query Builder