EUVD-2025-31114

Malicious code in bioql PyPI...

EUVD-2025-28279

Malicious code in bioql PyPI...

EUVD-2025-14091

Malicious code in bioql PyPI...

EUVD-2024-51681

Malicious code in bioql PyPI...

CVE-2025-59831

git-commiters is a Node.js function module providing committers stats for their git repository. Prior to version 0.1.2, there is a command injection vulnerability in git-commiters. This vulnerability manifests with the library's primary exported API: gitCommitersoptions, callback which allows...

dref is vulnerable to prototype pollution

A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2025-26278

A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2025-59831

CVE-2025-59831 affects the Node.js package git-commiters. The vulnerability stems from the gitCommiters(options, callback) API path where user-controlled options (e.g., cwd and revisionRange) were not properly sanitized and were concatenated into command execution, enabling potential command inje...

CVE-2025-59831 `git-comiters` Command Injection vulnerability

git-commiters is a Node.js function module providing committers stats for their git repository. Prior to version 0.1.2, there is a command injection vulnerability in git-commiters. This vulnerability manifests with the library's primary exported API: gitCommitersoptions, callback which allows...

CVE-2025-59831 `git-comiters` Command Injection vulnerability

git-commiters is a Node.js function module providing committers stats for their git repository. Prior to version 0.1.2, there is a command injection vulnerability in git-commiters. This vulnerability manifests with the library's primary exported API: gitCommitersoptions, callback which allows...

CVE-2025-59831 `git-comiters` Command Injection vulnerability

git-commiters is a Node.js function module providing committers stats for their git repository. Prior to version 0.1.2, there is a command injection vulnerability in git-commiters. This vulnerability manifests with the library's primary exported API: gitCommitersoptions, callback which allows...

PT-2025-39378

Name of the Vulnerable Software and Affected Versions dref version 0.1.2 Description A prototype pollution issue exists in the lib.set function. This allows attackers to potentially cause a Denial of Service DoS by providing a specially crafted payload. The issue involves manipulating the prototy...

Command Injection

Overview git-commiters is a Statistical summary of various infomation about git commiter. Affected versions of this package are vulnerable to Command Injection via the gitCommiters API which allows specifying options such as cwd for current working directory and revisionRange as a revision pointe...

PT-2025-39374

Name of the Vulnerable Software and Affected Versions git-commiters versions prior to 0.1.2 Description git-commiters is a Node.js function module used to provide committers statistics for a git repository. A command injection issue exists due to insufficient input sanitization and insecure proce...

Unspecified vulnerability in SueamCMS (CNVD-2025-21440)

SueamCMS is SueamCMS open source a content management system . A security vulnerability exists in SueamCMS version 0.1.2, which can be exploited by an attacker and may lead to the execution of arbitrary code...

CVE-2025-55835

File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering...

CVE-2025-55835

File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering...

CVE-2025-55835

File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering...

PT-2025-37321

Name of the Vulnerable Software and Affected Versions: SueamCMS version 0.1.2 Description: A file upload issue exists in SueamCMS version 0.1.2 that allows a remote attacker to execute arbitrary code due to insufficient input filtering. Recommendations: At the moment, there is no information abou...

CVE-2025-55835

CVE-2025-55835 affects SueamCMS v0.1.2. A file upload vulnerability enables remote code execution due to insufficient input filtering. The CVE’s metrics indicate a NETWORK attack vector, low complexity, no privileges, and a CRITICAL impact (CVSS v3.1 base score 9.8). Exploitation status is not de...