Malicious code in autopilot-utils-vulcan (npm)

The package autopilot-utils-vulcan was found to contain malicious code...

Malicious code in vulcan-rest-callback-jekyll (npm)

The package vulcan-rest-callback-jekyll was found to contain malicious code...

Malicious code in vulcan-docusaurus-quark-mineralogy (npm)

The package vulcan-docusaurus-quark-mineralogy was found to contain malicious code...

Malicious code in taurus-vulcan-paleoecology-sequelize (npm)

The package taurus-vulcan-paleoecology-sequelize was found to contain malicious code...

Malicious code in venus-vulcan-graphql-webdriverio (npm)

The package venus-vulcan-graphql-webdriverio was found to contain malicious code...

MAL-2025-21332 Malicious code in geoarchaeology-vulcan-celeste-style-loader (npm)

The package geoarchaeology-vulcan-celeste-style-loader was found to contain malicious code...

MAL-2025-21325 Malicious code in genomics-tectonophysics-vulcan-fornax (npm)

The package genomics-tectonophysics-vulcan-fornax was found to contain malicious code...

MAL-2025-38692 Malicious code in vulcan-jupiter-scripts-module (npm)

The package vulcan-jupiter-scripts-module was found to contain malicious code...

MAL-2025-38694 Malicious code in vulcan-rest-callback-jekyll (npm)

The package vulcan-rest-callback-jekyll was found to contain malicious code...

MAL-2025-32024 Malicious code in registry-pino-solis-vulcan (npm)

The package registry-pino-solis-vulcan was found to contain malicious code...

MAL-2025-38691 Malicious code in vulcan-docusaurus-quark-mineralogy (npm)

The package vulcan-docusaurus-quark-mineralogy was found to contain malicious code...

MAL-2025-21543 Malicious code in glaciology-vulcan-cryonics-javascript (npm)

The package glaciology-vulcan-cryonics-javascript was found to contain malicious code...

Allocation of Resources Without Limits or Throttling

Overview com.liferay:com.liferay.portal.vulcan.impl is a Liferay Portal Vulcan Implementation Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the lack of restrictions on the depth of GraphQL queries. An attacker can exhaust system...

vulcan-igrovieapparati.com Cross Site Scripting vulnerability OBB-3186697

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vulcan-casino-club.com Cross Site Scripting vulnerability OBB-3186696

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

orderonline.vulcanpizza.com.au Cross Site Scripting vulnerability OBB-2506546

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vulcan-777.co Improper Access Control vulnerability OBB-2254831

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Microsoft Exchange Server msExchEcpCanary CSRF / Privilege Escalation

!/usr/bin/env python3 """ Microsoft Exchange Server msExchEcpCanary Cross Site Request Forgery Elevation of Privilege Vulnerability CVE: CVE-2021-24085 Summary This vulnerability allows remote attackers escalate privileges on affected installations of Microsoft Exchange Server. Authentication and...

VMware Fixes Critical Flaw in ESXi Hypervisor

VMware has hurried out fixes for a critical flaw in its ESXi hypervisor, a few weeks after it was found during China’s Tianfu Cup hacking competition. The use-after-free vulnerability CVE-2020-4004 has a CVSS score of 9.3 out of 10, making it critical. It exists in the eXtensible Host Controller...

vulcan-steel.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031121 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting vulcan-steel.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO...