7423 matches found
MAL-2025-12183 Malicious code in @zalastax/nolb-lion-lib-s (npm)
The package @zalastax/nolb-lion-lib-s was found to contain malicious code...
MAL-2025-11339 Malicious code in @zalastax/nolb-eslint-s (npm)
The package @zalastax/nolb-eslint-s was found to contain malicious code...
MAL-2025-10681 Malicious code in @zalastax/nolb-api-s (npm)
The package @zalastax/nolb-api-s was found to contain malicious code...
MAL-2025-11283 Malicious code in @zalastax/nolb-ember-s (npm)
The package @zalastax/nolb-ember-s was found to contain malicious code...
MAL-2025-12547 Malicious code in @zalastax/nolb-ngx-s (npm)
The package @zalastax/nolb-ngx-s was found to contain malicious code...
s-collection.js (1.0.0) potentially affected by unknown CVE via lodash.js (0.0.1-security)
lodash.js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodash.js and may be impacted: - s-collection.js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25506...
Malicious code in @zalastax/nolb-nodebb-s (npm)
The package @zalastax/nolb-nodebb-s was found to contain malicious code...
MAL-2025-11767 Malicious code in @zalastax/nolb-graphql-s (npm)
The package @zalastax/nolb-graphql-s was found to contain malicious code...
MAL-2025-13063 Malicious code in @zalastax/nolb-passport-s (npm)
The package @zalastax/nolb-passport-s was found to contain malicious code...
MAL-2025-10388 Malicious code in @zalastax/nolb-_ryancavanaugh_s (npm)
The package @zalastax/nolb-ryancavanaughs was found to contain malicious code...
MAL-2025-11828 Malicious code in @zalastax/nolb-gulp-s (npm)
The package @zalastax/nolb-gulp-s was found to contain malicious code...
CVE-2025-42957
SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating...
CVE-2025-42957: Improper Control of Generation of Code
SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating...
CVE-2025-42946: Improper Limitation of a Pathname to a Restricted Directory
Due to directory traversal vulnerability in SAP S/4HANA Bank Communication Management, an attacker with high privileges and access to a specific transaction and method in Bank Communication Management could gain unauthorized access to sensitive operating system files. This could allow the attacke...
CVE-2025-42934: Improper Neutralization of CRLF Sequences in HTTP Headers
SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed LF characters into application inputs. This vulnerability has a low impact on the...
SAP S/4HANA 路径遍历漏洞
SAP S/4HANA is an enterprise resource management software based on the SAP HANA in-memory database system from SAP, Germany. A path traversal vulnerability exists in SAP S/4HANA that stems from vulnerability to directory traversal attacks...
CVE-2025-34152
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike othe...
CVE-2025-34152: Improper Neutralization of Special Elements used in an OS Command
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike othe...
CVE-2025-8229: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /parcellist.php. The manipulation of the argument s leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...
