Malicious code in cc-double-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70cef7c9872833a60083bf6c209e3c0820db61d4350689db8b2480b58026874 The package cc-double-1 was found to contain malicious code...

Malicious code in fix-cc-raiesy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17aa6cbdc4986ee5b3aa8c4ea5e5a4dc3ddfc9f7d266bdde5f9d81445551cb73 The package fix-cc-raiesy was found to contain malicious code. Source: ghsa-malware 8e5d10de64ca997908f8b7ba463f0bc41b2553f4d883ab13b6e9f7a4fa5d387e...

EUVD-2026-0743

Malicious code in cc-double-1 npm...

EUVD-2026-0738

Malicious code in fix-cc-raiesy npm...

WordPress Cost Calculator Builder plugin <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions vulnerability

Authenticated Subscriber+ Missing Authorization via getccorders/updateorderstatus Functions vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Cost Calculator Builder versions = 3.5.32...

MAL-2025-192932 Malicious code in cc-raiesy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9156cfe8712328dc4de944c470b2da3184bc49c1c444febc9eccf20f1fd962f The package cc-raiesy was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in cc-raiesy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9156cfe8712328dc4de944c470b2da3184bc49c1c444febc9eccf20f1fd962f The package cc-raiesy was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-205388

Malicious code in cc-raiesy npm...

WordPress CC Child Pages plugin <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'child_pages' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'childpages' Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin CC Child Pages versions = 2.0.0...

CVE-2025-13608

The CC Child Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'childpages' shortcode in all versions up to, and including, 2.0.0. This is due to insufficient input sanitization and output escaping on four user-supplied attributes usecustomlink, usecustomlinktarget,...

CVE-2025-13608 CC Child Pages <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'child_pages' Shortcode

The CC Child Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'childpages' shortcode in all versions up to, and including, 2.0.0. This is due to insufficient input sanitization and output escaping on four user-supplied attributes usecustomlink, usecustomlinktarget,...

CVE-2025-13608: Improper Neutralization of Input During Web Page Generation

The CC Child Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'childpages' shortcode in all versions up to, and including, 2.0.0. This is due to insufficient input sanitization and output escaping on four user-supplied attributes usecustomlink, usecustomlinktarget,...

CVE-2025-13558

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'deleteUserCcDraftPost' function in all versions up to, and including, 8.7.0. This makes it possible for authenticated attackers, wi...

CVE-2025-64329 affecting package moby-containerd-cc for versions less than 1.7.7-10

CVE-2025-64329 affecting package moby-containerd-cc for versions less than 1.7.7-10. A patched version of the package is available...

CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-13

CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-13. A patched version of the package is available...

HSEC-2024-0003 process: command injection via argument list on Windows

process: command injection via argument list on Windows The process library on Windows is vulnerable to a command injection vulnerability, via cmd.exe's interpretation of arguments. Programs that invoke batch files .bat, .cmd and pass arguments whose values are affected by program inputs may be...

EUVD-2025-137356

Malicious code in imodiov-kofi-cc npm...

MAL-2025-182318 Malicious code in imodiov-kofi-cc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1c6c3a1aeb1d9de92005ccf53a90fa7d27431a7b8581ad8b1139e66877d150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1c6c3a1aeb1d9de92005ccf53a90fa7d27431a7b8581ad8b1139e66877d150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

The vulnerabilities of the x86/coco components of the Linux operating system’s kernel, which allow a hacker to cause a service failure

The vulnerability of the x86/coco components of the Linux operating system’s kernel is related to insufficient checking of input data in the setuparch and ccmkdec functions. Exploiting this vulnerability can allow an attacker to cause a service failure...