Malicious code in env-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c55ff102f0d25988d4591334d7aeafa4f43877f5d7f248e861ae77a9dabfea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-47755

V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!VS4SaveEnvFile function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution...

MAL-2025-191845 Malicious code in python3-shodan (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b4fca245262ff8de532efc88e1941697e6994786e09eca8a9cbcdbf9faff5cca Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

@astrobase/core (>=0.2.0, <=0.4.0), @indiebackend/domain-ids (>=0.0.1, <=1.0.3) +2 more potentially affected by CVE-2025-27611 via base-x (5.0.0)

base-x NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on base-x and may be impacted: - @astrobase/core =0.2.0, =0.0.1, =0.0.11, =0.5.0, =0.5.15 Source cves: CVE-2025-27611 Source advisory: OSV:GHSA-XQ7P-G2VC-G82P...

VulnCheck KEV: CVE-2017-16894

In Laravel framework through 5.5.21, remote attackers can obtain sensitive information such as externally usable passwords via a direct request for the /.env URI. NOTE: this CVE is only about Laravel framework's writeNewEnvironmentFileWith function in...

Malicious code in @takamol/qiwa-env-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b86c910b37e0839cc34589794e9d597808f078c030da985d763aa3220ebd827 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vitess allows HTML injection in /debug/querylogz & /debug/env

...

AZL-58419 CVE-2025-22870 affecting package influxdb for versions less than 2.7.5-4

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

MAL-2025-2332 Malicious code in stdo-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19eec4371023b33251d813ec37b31b1b2f9b3ac6918894855d46cad967e8e486 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stdo-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19eec4371023b33251d813ec37b31b1b2f9b3ac6918894855d46cad967e8e486 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in env-check-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04728a28db58b9a9e546a8840e5cca54ab1f7dcf20fbb0817639e0c738a3bc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2256 Malicious code in env-check-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04728a28db58b9a9e546a8840e5cca54ab1f7dcf20fbb0817639e0c738a3bc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the httpGetEnv() function in the microprogramming software of TP-Link’s wireless signal booster device TL-WA850RE allows a hacker to induce a service failure.

The vulnerability of the httpGetEnv function in the microprogramming software of TP-Link’s wireless signal booster device TL-WA850RE is related to the operation that goes beyond the buffer in memory when processing the end-point data/syslog.filter.json file with the type parameter. Exploiting thi...

The vulnerability of the httpGetEnv() function (userRpm/WanDynamicIpV6CfgRpm.htm) in TP-Link TL-WR841ND router software allows a attacker to cause a service failure.

The vulnerability of the httpGetEnv function userRpm/WanDynamicIpV6CfgRpm.htm in the TP-Link TL-WR841ND router software is related to buffer overflows caused by improper cleaning or resource release when processing the gw parameter. Exploiting this vulnerability allows a remote attacker to cause...

PT-2025-25834

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the bpf verifier, where the copy verifier state function should copy the loop entry field. If not copied,...

UBUNTU-CVE-2025-24959

zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into process.env. This can lead to arbitrary command execution or unexpected behavior in applications that rely on environment variables for...

CVE-2024-55555

Technical details (affected versions, vulnerable components, impact scope, and fixes) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2024-55555

Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APPKEY. This is exacerbated by .env files, available from the product's repository, that have default APPKEY values. The route/hash route defined in the invoiceninja/routes/client.p...

CVE-2024-55555

Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APPKEY. This is exacerbated by .env files, available from the product's repository, that have default APPKEY values. The route/hash route defined in the invoiceninja/routes/client.p...

Malicious code in spinal-env-viewer-plugin-documentation-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3d2a0a560ea9b62097643b0b538b82a0eba36ef923886755262eeecca376650 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...