1796 matches found
Malicious code in epicgamestoggle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ce8cf223ee5049675959ae63d69ac8dc4097b3ceb5b795ae832d13b85f7cea5c The OpenSSF Package Analysis project identified 'epicgamestoggle' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
SUSE CVE-2021-29063
A Regular Expression Denial of Service ReDOS vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called...
Malicious code in csm27878 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0055598a8a443f1bd67fa612291473dcb36ba6e1c9927df85775eea3d207de11 The OpenSSF Package Analysis project identified 'csm27878' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2015-8371
Composer before 2016-02-10 allows cache poisoning from other projects built on the same host. This results in attacker-controlled code entering a server-side build process. The issue occurs because of the way that dist packages are cached. The cache key is derived from the package name, the dist...
Malicious code in not-a-math (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f65b9ef7e604f803f7ac9a09d7948911e9cde5f1033f969f2438c8422d48dd22 The OpenSSF Package Analysis project identified 'not-a-math' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
PT-2023-31310
Name of the Vulnerable Software and Affected Versions Digital Yepas version 1.0.0 Description The issue is related to an Improper Privilege Management vulnerability, allowing the collection of data as provided by users. This can be exploited due to the incorrect use of privileged APIs...
Lenosp Code Issues Vulnerabilities
Lenosp is a Spring Boot 2.0 rapid development modular scaffolding organized by Zhengzhou Programmers zzdevelop in China. A security vulnerability exists in Lenosp versions 1.0.0 to 1.2.0. The vulnerability stems from an arbitrary file upload vulnerability in the /user/upload component, which allo...
CVE-2023-39676
FieldPopupNewsletter Prestashop Module v1.0.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the callback parameter at ajax.php...
Prestashop Module Cross-Site Scripting Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The program provides a variety of payment methods , short message alerts and product image scaling and other features . A security vulnerability exists in Prestashop Module version v1.0.0, which stems fro...
Debian: Security Advisory (DLA-3556-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-30296 · Infosoftbd · Infosoftbd Clcknshop
Name of the Vulnerable Software and Affected Versions: Infosoftbd Clcknshop version 1.0.0 Description: A vulnerability was found in Infosoftbd Clcknshop, affecting unknown code of the file /collection/all. The manipulation of the argument q leads to cross site scripting. The attack can be initiat...
PT-2023-30297 · Infosoftbd · Clcknshop
Name of the Vulnerable Software and Affected Versions: Infosoftbd Clcknshop version 1.0.0 Description: A critical issue affects the processing of the file /collection/all of the component GET Parameter Handler. The manipulation of the tag argument leads to sql injection. The attack may be initiat...
Malicious code in yoga-repo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfdba41ba7e979cb19d028f2a4caec895183aa268f5bf2a1b2e1ff086366a1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-32596
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wolfgang Ertl weebotLite plugin = 1.0.0 versions...
WordPress plugin weebotLite 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Malicious code in matomo-screenshot-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc044c397b025c460ce571308d09c4bbbba7869abcc04f319cf219796f7a0666 The OpenSSF Package Analysis project identified 'matomo-screenshot-testing' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
PT-2023-26621 · Unknown · Kidus Minimati
Name of the Vulnerable Software and Affected Versions: Kidus Minimati version 1.0.0 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via the ID parameter in the "fulldelete.php" component. Recommendations: For Kidus Minimati version 1.0.0, as a temporary...
Minimati SQL注入漏洞
Minimati is a simple, lightweight and open source CMS from Kidus Personal Developers. A security vulnerability exists in Minimati version v.1.0.0 that originates from allowing remote attackers to obtain sensitive information via the ID parameter in the fulldelete.php component...
