407 matches found
EUVD-2024-1201
Malicious code in bioql PyPI...
EUVD-2024-54778
Malicious code in bioql PyPI...
EUVD-2024-1119
Malicious code in bioql PyPI...
EUVD-2024-54844
Malicious code in bioql PyPI...
EUVD-2024-1284
Malicious code in bioql PyPI...
EUVD-2022-7585
Malicious code in bioql PyPI...
EUVD-2024-54845
Malicious code in bioql PyPI...
EUVD-2024-54846
Malicious code in bioql PyPI...
EUVD-2024-1118
Malicious code in bioql PyPI...
EUVD-2024-1302
Malicious code in bioql PyPI...
Malicious Package
Overview @openzeppelin-compact/fungible-token is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...
Linux Distros Unpatched Vulnerability : CVE-2023-40014
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to version 4.9.3, contracts using ERC2771Context...
Missing Origin Validation
org.apache.zeppelin, zeppelin-shell is vulnerable to Missing Origin Validation. The vulnerability is due to lack of origin validation in WebSocket connections, which allows an attacker to access the Zeppelin server from another origin and retrieve internal information about paragraphs...
Improper Input Validation
org.apache.zeppelin, zeppelin-jdbc is vulnerable to Improper Input Validation. The vulnerability is due to incomplete JDBC URL validation that failed to handle URL encoded input, which allows an attacker to bypass validation checks and potentially exploit database connections...
Cross-Site Scripting (XSS)
org.apache.zeppelin, zeppelin-web is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to an incomplete blacklist of user input, which allows an attacker to inject malicious scripts and execute them in a victim’s browser...
Malicious code in zeppelin-xerophyte-8cxj (npm)
The package zeppelin-xerophyte-8cxj was found to contain malicious code...
Malicious code in ant-zeppelin-csy326-project (npm)
The package ant-zeppelin-csy326-project was found to contain malicious code...
Malicious code in zeppelin-xenon-ewss (npm)
The package zeppelin-xenon-ewss was found to contain malicious code...