47 matches found
ROOT-APP-NPM-CVE-2025-8129 CVE-2025-8129 in @rootio/koa - Patched by Root
Root has patched CVE-2025-8129 in the @rootio/koa package for Root:npm. Multiple fixed versions available...
CVE-2026-8129
A vulnerability was determined in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file wishlist.php. Executing a manipulation of the argument delwlistid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...
CVE-2026-8129
A vulnerability was determined in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file wishlist.php. Executing a manipulation of the argument delwlistid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...
@certd/commercial-core (>=1.25.9, <=1.45.5), @certd/lib-server (>=1.36.25, <=1.45.5) +32 more potentially affected by CVE-2025-62595 +1 more via koa (2.16.2)
koa NPM version 2.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on koa and may be impacted: - @certd/commercial-core =1.25.9, =1.36.25, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =0.19.3, =3.20.11,...
@0xyy/elpis (>=1.0.0, <=1.0.2), @10xsai/cloudflare-router-nx-plugin (1.0.0) +1486 more potentially affected by CVE-2025-54420 +1 more via koa (>=2.0.0, <=2.16.1)
koa NPM version =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.1.3 - @ahua0920/elpis 1.0.0 and more Source cves: CVE-2025-54420, CVE-2025-8129 Source advisory: OSV:GHSA-JGMV-J7WW-JX2X...
@freon4dsl/server (>=2.0.0-beta.1, <=2.0.0-beta.5), @tachybase/engine (>=1.0.21, <=1.1.2) +3 more potentially affected by CVE-2025-54420 +1 more via koa (3.0.0)
koa NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on koa and may be impacted: - @freon4dsl/server =2.0.0-beta.1, =1.0.21, =1.3.7, =1.4.0, =15.4.0, =15.4.2 Source cves: CVE-2025-54420, CVE-2025-8129 Source advisory: OSV:GHSA-JGMV-J7WW-J...
@0xyy/elpis (>=1.0.0, <=1.0.2), @10xsai/cloudflare-router-nx-plugin (1.0.0) +1486 more potentially affected by CVE-2025-54420 +1 more via koa (>=2.0.0, <=2.16.1)
koa NPM version =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.1.3 - @ahua0920/elpis 1.0.0 and more Source cves: CVE-2025-54420, CVE-2025-8129 Source advisory: GHSA-JGMV-J7WW-JX2X...
CVE-2025-8129 KoaJS Koa HTTP Header response.js back redirect
A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0. Affected is the function back in the library lib/response.js of the component HTTP Header Handler. The manipulation of the argument Referrer leads to open redirect. It is possible to launch the attack...
CVE-2025-8129
CVE-2025-8129 affects Koa (Koa up to v3.0.0). The vulnerability lies in lib/response.js where manipulation of Referrer can trigger an open redirect. Exploitation is remote and the exploit has been disclosed publicly. Remediation per public sources is to upgrade Koa to a version that contains the ...
CVE-2020-8129
An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2014-8129
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted TIFF image, as...
CVE-2024-8129
creationtimestamp| type| source ---|---|--- 2024-08-24 19:03:19+00:00| seen| https://t.me/cvedetector/4058...
CVE-2019-8129
creationtimestamp| type| source ---|---|--- 2024-02-04 14:41:14+00:00| seen| https://t.me/ctinow/178831...
Mageia: Security Advisory (MGASA-2015-0112)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
@dfeidao/server (>=4.5.201902251314, <=4.6.201910181238), @feidao-factory/server (>=5.0.201901071713, <=5.1.201902201403) +26 more potentially affected by CVE-2020-8129 via script-manager (>=0.2.0, <=0.8.6)
script-manager NPM version =0.2.0, =4.5.201902251314, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =2.0.0, =1.6.2-patch.1, =1.0.0, =1.0.1, =1.0.0, =0.4.0, =1.1.1, =0.0.1, =1.0.1, =1.0.3 and more Source cves: CVE-2020-8129 Source advisory:...
CVE-2020-8129
An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code...
CVE-2020-8129
An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code...
CVE-2020-8129
Summary: CVE-2020-8129 affects the Node.js module script-manager (version 0.8.6 and earlier). The vulnerability arises from how the module loads code via dynamic require using a user-controlled path (execModulePath), which can cause arbitrary code execution on the server. Multiple sources (NVD, R...
Huawei EulerOS: Security Advisory for compat-libtiff3 (EulerOS-SA-2017-1044)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...