bug-reaper

BugReaper Compétence IA structurée pour le bug bounty web2 — 18 classes de vulnérabilités, 4 plateformes de bug bounty, zéro déchet IA. Compatible avec OpenClaw, Cursor, Claude Code, Antigravity et Windsurf...

CVE-2026-75334

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...

EUVD-2026-66700

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...

CVE-2026-75334

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...

CVE-2026-75334

smart-web2 v1.3.1 (backend, report module) is vulnerable to arbitrary SQL execution via the sqlResource.sql parameter. This parameter is stored in the t_report_sql_resource table through the ReportController.save() interface and is directly embedded into Hibernate native queries without any param...

CVE-2026-61884 Tycon Systems TPDIN-Monitor-WEB2 Missing Authentication for Critical Function

The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in this unconfigured state serves the web management interface without requiring any login. An attacker with network acces...

CVE-2026-61884

Technical details are not publicly available in the provided documents. Monitor for updates from NVD/CVE and trusted advisories to confirm affected versions, root cause specifics, and remediation.

CVE-2026-55985 Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information

The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used t...

EUVD-2020-17100

Malware in sbrugna...

EUVD-2015-1074

Malware in sbrugna...

Malicious code in pool-web2 (npm)

The package pool-web2 was found to contain malicious code...

MAL-2025-29507 Malicious code in pool-web2 (npm)

The package pool-web2 was found to contain malicious code...

Malicious code in adcm-web2 (npm)

The package adcm-web2 was found to contain malicious code...

MAL-2025-14068 Malicious code in adcm-web2 (npm)

The package adcm-web2 was found to contain malicious code...

Malicious code in adobe-dcapi-web2 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-10199 Malicious code in web2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3a75e3927a62be623b592f888af0f7be16ed76042e542fb94cd592311ef2c52b --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

READYgg Onboards 15 Million Web2 Players into Web3 in Partnership with Aptos Labs

By Owais Sultan Millions of players will enter web3 gaming thanks to a new partnership between READYgg and Aptos Labs realized… This is a post from HackRead.com Read the original post: READYgg Onboards 15 Million Web2 Players into Web3 in Partnership with Aptos Labs...

web2.heimat.de Cross Site Scripting vulnerability OBB-3728842

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

web2.gov.mb.ca Cross Site Scripting vulnerability OBB-3614522

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

web2.gov.mb.ca Cross Site Scripting vulnerability OBB-3536637

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...