814 matches found
MAL-2025-38134 Malicious code in vanilla-zucchini-charlie-efxne (npm)
The package vanilla-zucchini-charlie-efxne was found to contain malicious code...
MAL-2025-38111 Malicious code in vanilla-oe4-project (npm)
The package vanilla-oe4-project was found to contain malicious code...
MAL-2025-34523 Malicious code in tango-vanilla-jjio (npm)
The package tango-vanilla-jjio was found to contain malicious code...
MAL-2025-14715 Malicious code in apple-vanilla-uknp (npm)
The package apple-vanilla-uknp was found to contain malicious code...
Malicious code in quebec-vanilla-drmi (npm)
The package quebec-vanilla-drmi was found to contain malicious code...
Malicious code in vanilla-apple-supf (npm)
The package vanilla-apple-supf was found to contain malicious code...
Malicious code in vanilla-cacher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a170174d56e5363e8c8a3d47eb94f80f3b3dc18a2bf2240e372730ffe076ca97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview vanilla-cacher is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-6375 Malicious code in vanilla-cacher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a170174d56e5363e8c8a3d47eb94f80f3b3dc18a2bf2240e372730ffe076ca97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in vanilla-cacher
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2020-8825
index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...
CVE-2010-4264
It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side...
CVE-2012-6556
Multiple cross-site scripting XSS vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 User/FirstName or 2 User/LastName parameter to the edit user page. NOTE: some of these details are obtained from third...
CVE-2019-9889
In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal with File Inclusion. An attacker can leverage this vulnerability to execute code under the context of...
CVE-2012-6555
Cross-site scripting XSS vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title...
CVE-2011-1009
Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter...
CVE-2010-4266
It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher...
CVE-2011-3812
Vanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Minify/min/utils.php and certain other files...
grpo-flat 代码问题漏洞
grpo-flat is a tool for training grpo using zero dataset and low resources by XU-YIJIE personal developer. A code issue vulnerability exists in grpo-flat that stems from improper handling of the function main in the file grpovanilla.py, which could lead to a deserialization attack...