MAL-2022-701 Malicious code in @vendavo/not-pezzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33d49d4d2b20d15a7e0c4d9d2fa663b3e72f48a5f97bf223e884c76cbc18c279 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-702 Malicious code in @vendavo/pezzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 004a318b1360c752adc4c276b1fd4e32649129a0c30bc957433d4c8f4e3710b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

tracker.vendavo.com XSS vulnerability

Open Bug Bounty ID: OBB-664811 Description| Value ---|--- Affected Website:| tracker.vendavo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

www2.vendavo.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-162080 Description| Value ---|--- Affected Website:| www2.vendavo.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...