EUVD-2025-34455

Flowise: Authenticated Command Execution and Sandbox Bypass via Puppeteer and Playwright Packages...

CVE-2025-34267 Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright Packages

Flowise v3.0.1 3.0.8 and all versions after with 'ALLOWBUILTINDEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules Puppeteer and Playwright within the nodevm execution environment. An authenticated attacker...

EUVD-2015-8457

Malware in sbrugna...

EUVD-2020-29102

Malware in sbrugna...

EUVD-2012-1855

Malware in sbrugna...

EUVD-2015-8456

Malware in sbrugna...

EUVD-2017-14504

Malware in sbrugna...

EUVD-2017-16757

Malware in sbrugna...

EUVD-2015-8455

Malware in sbrugna...

EUVD-2017-17720

Malware in sbrugna...

EUVD-2025-24592

Malicious code in bioql PyPI...

PT-2025-39672

Name of the Vulnerable Software and Affected Versions Dibo Data Decision Making System versions prior to 2.7.0 Description A path traversal issue exists in Dibo Data Decision Making System. The issue is related to the manipulation of the filePath argument within the downloadImpTemplet function...

Malicious code in private-dep-with-frontend-plugin-index-path (npm)

The package private-dep-with-frontend-plugin-index-path was found to contain malicious code...

MAL-2025-45592 Malicious code in private-dep-with-frontend-plugin-index-path (npm)

The package private-dep-with-frontend-plugin-index-path was found to contain malicious code...

MAL-2025-44701 Malicious code in inline-dep (npm)

The package inline-dep was found to contain malicious code...

MAL-2025-41822 Malicious code in cyclic-dep-explicit-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e587976f564b0bbbf5eaaed83fdbe6b64e1c989d0e1c90e13dc5e0b579193a1 The OpenSSF Package Analysis project identified 'cyclic-dep-explicit-1' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

Malicious code in cyclic-dep-explicit-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e587976f564b0bbbf5eaaed83fdbe6b64e1c989d0e1c90e13dc5e0b579193a1 The OpenSSF Package Analysis project identified 'cyclic-dep-explicit-1' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-41324 Malicious code in rush-cyclic-dep-1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc3b2fad762b8091211ef41ee84b4321f34789e8957982339cb99ad5c439f9bf The OpenSSF Package Analysis project identified 'rush-cyclic-dep-1' @...

Malicious code in rush-cyclic-dep-1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc3b2fad762b8091211ef41ee84b4321f34789e8957982339cb99ad5c439f9bf The OpenSSF Package Analysis project identified 'rush-cyclic-dep-1' @...

Malicious code in rush-cyclic-dep-2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e5cc5e314974fca4f3bebd4496f775715aaac26a94fcde395ec10bae8ac3758 The OpenSSF Package Analysis project identified 'rush-cyclic-dep-2' @...