9 matches found
Malicious code in ember-velcro (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb2c22cbb7ab559c0ac1e61418ae224e561beacb9571166240b4c5249a098dbb Any computer that has this package installed or running should be considered fully compromised. All...
MAL-2025-47311 Malicious code in ember-velcro (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb2c22cbb7ab559c0ac1e61418ae224e561beacb9571166240b4c5249a098dbb Any computer that has this package installed or running should be considered fully compromised. All...
@crowdstrike/ember-toucan-core (>=0.3.0 <=0.4.6), @frontile/buttons (=0.18.0-alpha.5) +13 more potentially affected by unknown CVE via ember-velcro (=2.2.0)
ember-velcro NPM version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ember-velcro and may be impacted: - @crowdstrike/ember-toucan-core =0.3.0, =0.17.0-alpha.0, =0.17.0, =0.17.0, =0.17.0, =9.4.0, =8.3.0, =0.1.0, =0.0.4, =0.17.0, =0.0.4, =0.0...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Malicious code in @ember-velcro/monorepo-root (npm)
The package @ember-velcro/monorepo-root was found to contain malicious code...
MAL-2025-42485 Malicious code in @ember-velcro/monorepo-root (npm)
The package @ember-velcro/monorepo-root was found to contain malicious code...
源天(Velcro)协同OA /ServiceAction/com.velcro.base.DataAction?sql= SQL语句执行漏洞
ServiceAction/com.velcro.base.DataAction?sql=|20select|20categoryids|20from|20project|20where|20id=%27%27%20and%201=2%20union%20all%20select%20select%20banner%20from%20sys.v$version%20where%20rownum=1%20from%20dual&isworkflow=trueE 任意SQL语句执行...
源天(Velcro)协同OA /ServiceAction/com.velcro.document.base.servlet.DocbaseAction POST注入
No description provided by source...
源天(Velcro)协同OA /ServiceAction/com.velcro.base.GetDataAction formid SQL注入漏洞
No description provided by source...