MAL-2025-191948 Malicious code in kkkarem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5221f3ec4ce8c314da6ded901d34c1ef2a0f7822bbec42d09a218885c47b41b2 The package kkkarem was found to contain malicious code. Source: ossf-package-analysis 85f2f16bc0953b5738e5248e16c823f06c7e3e9805d0e85726a59b9d72a4f3...

Malicious code in kkkarem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5221f3ec4ce8c314da6ded901d34c1ef2a0f7822bbec42d09a218885c47b41b2 The package kkkarem was found to contain malicious code. Source: ossf-package-analysis 85f2f16bc0953b5738e5248e16c823f06c7e3e9805d0e85726a59b9d72a4f3...

CVE-2025-57199

The AVTECH SECURITY Corporation DGM1104 network video recorder (specifically FullImg-1015-1004-1006-1003 ) is vulnerable to an authenticated command injection flaw within the NetFailDetectD binary. An attacker with low-level privileges can provide a crafted input to execute arbitrary commands on ...

CVE-2025-57200

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

CVE-2025-57199: Improper Neutralization of Special Elements used in a Command

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

Red Hat ABRT 安全漏洞

Red Hat ABRT is a suite of tools from Red Hat, Inc. that helps users detect and report application crashes. A security vulnerability exists in Red Hat ABRT that stems from a lack of validation when processing user-supplied mount information, which could cause a local user to execute arbitrary...

ROS-20251203-03

A vulnerability in the JMX interface of the Apache Cassandra distributed database management system is related to a flaw in the deserialization mechanism. flaws in the deserialization mechanism. Exploitation of the vulnerability could allow an attacker to implement a man-in-the-middle...

CVE-2025-57200

The AVTECH SECURITY Corporation DGM1104 network video recorder (version FullImg-1015-1004-1006-1003 ) is vulnerable to an authenticated command injection flaw within the test_mail function. This vulnerability allows an attacker to execute arbitrary commands by providing specially crafted input, p...

CVE-2025-66476

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

UBUNTU-CVE-2025-66476

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476

Vim for Windows before 9.1.1947 is affected by CVE-2025-66476, an uncontrolled search-path vulnerability that allows launching a malicious executable in the current working directory when Vim resolves external commands (eg. :grep, :!, compiler/make) while using cmd.exe. Affected product: Vim for ...

CVE-2025-66476 Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

EUVD-2025-200373

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476 Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66294

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection SSTI vulnerability exists in Grav that allows authenticated attackers with editor permissions to execute arbitrary commands on the server and, under certain conditions, may also be exploited by...

Malicious code in wfui-dbd-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49a931af71a32dfa7644c29cca564d41bd857fa8cdea4956e0764cd224834ad The package wfui-dbd-react-ui was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191668 Malicious code in wfui-dbd-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49a931af71a32dfa7644c29cca564d41bd857fa8cdea4956e0764cd224834ad The package wfui-dbd-react-ui was found to contain malicious code. Source: ghsa-malware...

Malicious code in wfui-dsm-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab7eb463079033f35833ad6226f3db96e8b3e17ed382e0868d2ad823af5bb34 The package wfui-dsm-react-ui was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191669 Malicious code in wfui-dsm-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab7eb463079033f35833ad6226f3db96e8b3e17ed382e0868d2ad823af5bb34 The package wfui-dsm-react-ui was found to contain malicious code. Source: ghsa-malware...