2939 matches found
CVE-2024-39954
CVE-2024-39954 refers to a Server-Side Request Forgery (SSRF) in the Apache EventMesh project, specifically in the eventmesh-runtime module’s WebhookUtil.java. The vulnerability affects the WebhookUtil.java functionality that could allow an attacker to read or modify internal resources on affecte...
Malicious code in api-util (npm)
The package api-util was found to contain malicious code...
Malicious code in avalon-util-cli (npm)
The package avalon-util-cli was found to contain malicious code...
MAL-2025-15191 Malicious code in avalon-util-cli (npm)
The package avalon-util-cli was found to contain malicious code...
Malicious code in dynseg-util (npm)
The package dynseg-util was found to contain malicious code...
Malicious code in ethers-util (npm)
The package ethers-util was found to contain malicious code...
MAL-2025-14648 Malicious code in api-util (npm)
The package api-util was found to contain malicious code...
Malicious code in avalon-util-plugin (npm)
The package avalon-util-plugin was found to contain malicious code...
MAL-2025-20727 Malicious code in fn-util (npm)
The package fn-util was found to contain malicious code...
Malicious code in fn-util (npm)
The package fn-util was found to contain malicious code...
MAL-2025-15192 Malicious code in avalon-util-plugin (npm)
The package avalon-util-plugin was found to contain malicious code...
MAL-2025-19039 Malicious code in dynseg-util (npm)
The package dynseg-util was found to contain malicious code...
MAL-2025-19892 Malicious code in ethers-util (npm)
The package ethers-util was found to contain malicious code...
Malicious code in my-internal-util-alpha03 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5226a39e582ae7182e19ff891ade0e29cd6e15705fa87bd0bd0757a8a0796c8 The OpenSSF Package Analysis project identified 'my-internal-util-alpha03' @ 99.9.10 npm as malicious. It is considered malicious because: - The...
MAL-2025-6864 Malicious code in my-internal-util-alpha03 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5226a39e582ae7182e19ff891ade0e29cd6e15705fa87bd0bd0757a8a0796c8 The OpenSSF Package Analysis project identified 'my-internal-util-alpha03' @ 99.9.10 npm as malicious. It is considered malicious because: - The...
CVE-2025-8814
A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function setCookie of the file src/main/java/co/yiiu/pybbs/util/CookieUtil.java. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has...
CVE-2025-8814 atjiu pybbs CookieUtil.java setCookie cross-site request forgery
A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function setCookie of the file src/main/java/co/yiiu/pybbs/util/CookieUtil.java. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has...
CVE-2025-8814 atjiu pybbs CookieUtil.java setCookie cross-site request forgery
A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function setCookie of the file src/main/java/co/yiiu/pybbs/util/CookieUtil.java. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has...
CVE-2025-8814
CVE-2025-8814 affects atjiu pybbs up to version 6.0.0. The vulnerability lies in the setCookie function in src/main/java/co/yiiu/pybbs/util/CookieUtil.java, enabling cross-site request forgery. Exploitation is possible remotely, and public disclosure of the exploit is noted. The patch 8aa2bb1aef3...