Malicious code in monitor-website (npm)

The package monitor-website was found to contain malicious code...

Malicious code in ng-website (npm)

The package ng-website was found to contain malicious code...

Malicious code in proctor-website (npm)

The package proctor-website was found to contain malicious code...

Malicious code in website-bundle (npm)

The package website-bundle was found to contain malicious code...

MAL-2025-31831 Malicious code in react-native-website (npm)

The package react-native-website was found to contain malicious code...

Malicious code in react-native-website (npm)

The package react-native-website was found to contain malicious code...

Malicious code in test-website-hashroute (npm)

The package test-website-hashroute was found to contain malicious code...

Malicious code in risc-zero-developer-website (npm)

The package risc-zero-developer-website was found to contain malicious code...

MAL-2025-26652 Malicious code in monitor-website (npm)

The package monitor-website was found to contain malicious code...

MAL-2025-9267 Malicious code in @react-native-website/update-redirects (npm)

The package @react-native-website/update-redirects was found to contain malicious code...

MAL-2025-36703 Malicious code in test-website-hashroute (npm)

The package test-website-hashroute was found to contain malicious code...

MAL-2025-25895 Malicious code in manifold-website (npm)

The package manifold-website was found to contain malicious code...

MAL-2025-32271 Malicious code in risc-zero-developer-website (npm)

The package risc-zero-developer-website was found to contain malicious code...

MAL-2025-29693 Malicious code in proctor-website (npm)

The package proctor-website was found to contain malicious code...

MAL-2025-27462 Malicious code in ng-website (npm)

The package ng-website was found to contain malicious code...

MAL-2025-39049 Malicious code in website-bundle (npm)

The package website-bundle was found to contain malicious code...

CVE-2025-55709

CVE-2025-55709 is a storage XSS flaw in the Visual Composer Website Builder plugin. The vulnerability arises from improper input neutralization during web page generation, enabling stored XSS in the affected plugin. Evidence from multiple sources indicates the vulnerability affects the Visual Com...

CVE-2025-55709 WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through 45.15.0...

WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Visual Composer Website Builder versions 45.15.0...

Exploit for CVE-2020-11989

使用说明 首页 所见即所得，点击对应的按钮会跳转到相应的模块 渗透测试 网站扫描 网站扫描功能缝了afrog项目地址，基本就是差不多把该扫描器的功能UI化，且内置反连无需再配置ceye或jndi已将jndi有关poc全部替换成反连地址，主动探测的漏洞或者指纹会写入到report目录下的html文件中，并没有将afrog命令的输出进行删除（所以你在go run main.go运行工具时，依然能看到命令行存在afrog的输出内容） 目标格式支持 URL 或者 IP:PORT 仅指纹扫描/指纹POC扫描/主动指纹探测 - 仅指纹扫描：只对当前网页发送两个数据包进行探测指纹 - 主动指纹探测：...