one.xuelun:new-framework (>=v2.0.0.1, <=v2.0.0.2), tech.hljzj.framework:zz-framework (>=v2.0.0.1, <=v2.0.0.2) +1 more potentially affected by CVE-2026-73086 via org.webjars.npm:nanoid (3.3.4)

org.webjars.npm:nanoid MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:nanoid and may be impacted: - one.xuelun:new-framework =v2.0.0.1, =v2.0.0.1, =v2.0.0.1, =v2.0.0.2 Source cves: CVE-2026-73086 Source advisory:...

one.xuelun:new-framework (>=v2.0.0.1, <=v2.0.0.2), tech.hljzj.framework:zz-framework (>=v2.0.0.1, <=v2.0.0.2) +1 more potentially affected by CVE-2026-67214 via org.webjars.npm:nanoid (3.3.4)

org.webjars.npm:nanoid MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:nanoid and may be impacted: - one.xuelun:new-framework =v2.0.0.1, =v2.0.0.1, =v2.0.0.1, =v2.0.0.2 Source cves: CVE-2026-67214 Source advisory:...

Malicious Package

Overview zz-oai-test12 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-9933 Malicious code in zz-oai-test12 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zz-oai-test12 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

OpenSTAManager code-related vulnerabilities

OpenSTAManager is an open-source management software developed by Devcode, used for technical assistance and billing purposes. Versions of OpenSTAManager prior to 2.10.2 contained code vulnerabilities. These vulnerabilities stemmed from the oauth2.php file being an unvalidated endpoint. Attackers...

CVE-2025-1847

A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was...

CVE-2025-1848

A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the file /importdatacheck. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to...

CVE-2025-1820

A vulnerability has been found in zj1983 zz up to 2024-8 and classified as critical. Affected by this vulnerability is the function getOaWid of the file src/main/java/com/futvan/z/system/zworkflow/ZworkflowAction.java. The manipulation of the argument tableId leads to sql injection. The attack ca...

EUVD-2020-11857

Malware in sbrugna...

EUVD-2007-5592

Malware in sbrugna...

EUVD-2020-11856

Malware in sbrugna...

EUVD-2020-11853

Malware in sbrugna...

EUVD-2020-11855

Malware in sbrugna...

EUVD-2025-5849

Malicious code in bioql PyPI...

CVE-2020-19961

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php...

CVE-2020-19959

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendmail.php page cookie...

CVE-2020-19960

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendsms.php page cookie...

CVE-2020-19957

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dlprint.php page...

Malicious code in zz-react-custom-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c52c19012a2e7ff5c32331c8fb8bdf0ec9811d36c029f8d2ff30de7c98fdf6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...