743 matches found
CVE-2025-54994 @akoskm/create-mcp-server-stdio has Command Injection in MCP Server due to unsafe `exec` API
@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...
CVE-2025-54994 @akoskm/create-mcp-server-stdio has Command Injection in MCP Server due to unsafe `exec` API
@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...
MAL-2025-43521 Malicious code in asteroid-quito-child-process-rest (npm)
The package asteroid-quito-child-process-rest was found to contain malicious code...
Malicious code in child-process-query-sagitta-chakra-ui (npm)
The package child-process-query-sagitta-chakra-ui was found to contain malicious code...
Malicious code in asteroid-quito-child-process-rest (npm)
The package asteroid-quito-child-process-rest was found to contain malicious code...
MAL-2025-43785 Malicious code in child-process-query-sagitta-chakra-ui (npm)
The package child-process-query-sagitta-chakra-ui was found to contain malicious code...
CVE-2025-56803
CVE-2025-56803 affects Figma Desktop for Windows v125.6.5. The vulnerability is a command injection in the local plugin loader: if a plugin manifest.json includes a string in the build field, it is passed to Node.js child_process.exec without validation, enabling arbitrary OS command execution wh...
Exploit for CVE-2025-56803
CVE-2025-56803 Command Injection Vulnerability via Plugin...
Linux Distros Unpatched Vulnerability : CVE-2019-12210
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debugfile, that file descriptor is not closed when a new process is...
CVE-2025-52385
An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...
Malicious code in gulp-airbnb-child-process-pulsar (npm)
The package gulp-airbnb-child-process-pulsar was found to contain malicious code...
Malicious code in norma-octans-neptune-child-process (npm)
The package norma-octans-neptune-child-process was found to contain malicious code...
Malicious code in child-process-rigel-soap-comet (npm)
The package child-process-rigel-soap-comet was found to contain malicious code...
Malicious code in jest-miranda-child-process-deneb (npm)
The package jest-miranda-child-process-deneb was found to contain malicious code...
Malicious code in mocha-filament-child-process-janus (npm)
The package mocha-filament-child-process-janus was found to contain malicious code...
Malicious code in pegasus-oberon-child-process-sqlite (npm)
The package pegasus-oberon-child-process-sqlite was found to contain malicious code...
Malicious code in cypress-loop-child-process-hyperion (npm)
The package cypress-loop-child-process-hyperion was found to contain malicious code...
MAL-2025-17895 Malicious code in cypress-loop-child-process-hyperion (npm)
The package cypress-loop-child-process-hyperion was found to contain malicious code...