162 matches found
CVE-2025-7760
CVE-2025-7760 affects Ofisimo Web-Based Software Technologies Association Web Package Flora (versions 3.0 through 03022026). The issue stems from improper input handling during web page generation, enabling cross-site scripting via HTTP headers. Red Hat and other sources corroborate the same desc...
PT-2026-6000
Name of the Vulnerable Software and Affected Versions Ofisimo Web-Based Software Technologies Association Web Package Flora versions 3.0 through 03022026 Description The software contains a flaw related to improper input handling during web page generation, potentially leading to Cross-site...
Open Redirect
Overview Volo.Abp.Account.Web is a part of the ABP Framework. Affected versions of this package are vulnerable to Open Redirect due to improper validation of the returnUrl parameter in the register function. An attacker can redirect users to arbitrary external domains by supplying a crafted URL...
MAL-2025-55023 Malicious code in @rce-web/ui-upgrade-dialog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e62e8b0f953b91fb74e52a2d70374df46b221c1d7cc57bcc80e0671cf32796 The package @rce-web/ui-upgrade-dialog was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in adyen-web-v5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b6c05640ee26217a85a428224b5a1a72790f5efec2d036828cb3cda0afa5ab The package adyen-web-v5 was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm...
MAL-2025-49213 Malicious code in epic-web-payment-management (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57322b3ae061187188fbd722c1c0d7443dd93af100c00eb9259dc7f197a2fc59 The package epic-web-payment-management was found to contain malicious code...
Malicious code in add-to-cart-web (npm)
--- -= Per source details. Do not edit below this line.=-...
EUVD-2024-48169
Malicious code in bioql PyPI...
MAL-2025-42159 Malicious code in bohr-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1951f7ba96d2d67ff96aa97e3fb6fe00615dbf39ba8b1b9fc822b33bdac69ba0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in spin-web (npm)
The package spin-web was found to contain malicious code...
Malicious code in typopro-web-TypoPRO-Satisfy (npm)
The package typopro-web-TypoPRO-Satisfy was found to contain malicious code...
MAL-2025-27521 Malicious code in NightPro-Web (npm)
The package NightPro-Web was found to contain malicious code...
MAL-2025-37425 Malicious code in typopro-web-TypoPRO-Coustard (npm)
The package typopro-web-TypoPRO-Coustard was found to contain malicious code...
MAL-2025-37455 Malicious code in typopro-web-TypoPRO-Rosario (npm)
The package typopro-web-TypoPRO-Rosario was found to contain malicious code...
Malicious code in cycle-monorepo-sandbox-http (npm)
The package cycle-monorepo-sandbox-http was found to contain malicious code...
MAL-2025-37240 Malicious code in truncate-html-lth (npm)
The package truncate-html-lth was found to contain malicious code...
Malicious code in VDU-web (npm)
The package VDU-web was found to contain malicious code...
Malicious code in @framgia/viblo-accounts-auth-web (npm)
The package @framgia/viblo-accounts-auth-web was found to contain malicious code...