5267 matches found
Malicious code in @zalastax/nolb-demo-o (npm)
The package @zalastax/nolb-demo-o was found to contain malicious code...
Malicious code in ng-demo-lib-ts (npm)
The package ng-demo-lib-ts was found to contain malicious code...
Malicious code in phantomjs-crawler-demo (npm)
The package phantomjs-crawler-demo was found to contain malicious code...
Malicious code in @zalastax/nolb-demo-z (npm)
The package @zalastax/nolb-demo-z was found to contain malicious code...
MAL-2025-27842 Malicious code in npm-script-demo (npm)
The package npm-script-demo was found to contain malicious code...
MAL-2025-29114 Malicious code in phantomjs-crawler-demo (npm)
The package phantomjs-crawler-demo was found to contain malicious code...
MAL-2025-11132 Malicious code in @zalastax/nolb-demo-w (npm)
The package @zalastax/nolb-demo-w was found to contain malicious code...
MAL-2025-11133 Malicious code in @zalastax/nolb-demo-x (npm)
The package @zalastax/nolb-demo-x was found to contain malicious code...
MAL-2025-11134 Malicious code in @zalastax/nolb-demo-y (npm)
The package @zalastax/nolb-demo-y was found to contain malicious code...
MAL-2025-14729 Malicious code in applovin-max-native-plugin-demo (npm)
The package applovin-max-native-plugin-demo was found to contain malicious code...
CVE-2025-51986
An issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12 allowing attackers to reach an infinite loop via a crafted length value for a packet...
@proompter/demo-next (>=0.0.16, <=0.0.19), @proompter/flowise (>=1.4.13, <=1.4.14) +2 more potentially affected by CVE-2025-8943 via flowise-components (>=1.3.4, <=3.1.4)
flowise-components NPM version =1.3.4, =0.0.16, =1.4.13, =0.0.1, =1.0.0, =3.1.4 Source cves: CVE-2025-8943 Source advisory: SNYK:JS-FLOWISECOMPONENTS-11953677...
CVE-2025-51986
CVE-2025-51986 affects the demo/LINUXTCP implementation of freemodbus (v2018-09-12). The root cause is a crafted length value in a packet that can cause an infinite loop, per multiple connected sources (NVD/Red Hat/CIRCL/CVE lists). Impact stated as potential denial of service via infinite loop; ...
WordPress Zakra Unauthorized Modification Vulnerability
WordPress Zakra is a WordPress theme known for its power, compatibility and lightweight design, suitable for creating personal blogs, business websites, WooCommerce stores and more. WordPress Zakra suffers from an unauthorized modification vulnerability that stems from a missing...
MAL-2025-6805 Malicious code in nodejs-with-singlestore-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2dfae81e2129cf717fbae5a22ecd1938d1ea741de0968e42d5363363d6ea2dfe The OpenSSF Package Analysis project identified 'nodejs-with-singlestore-demo' @ 1002.0.1 npm as malicious. It is considered malicious because: ...
CVE-2025-8595 Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import
The Zakra theme for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the welcomenoticeimporthandler function in all versions up to, and including, 4.1.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...
CVE-2025-8595 Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import
The Zakra theme for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the welcomenoticeimporthandler function in all versions up to, and including, 4.1.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...
WordPress plugin Zakra 安全漏洞
WordPress Zakra is a WordPress theme known for its power, compatibility and lightweight design, suitable for creating personal blogs, business websites, WooCommerce stores and more. WordPress Zakra suffers from an unauthorized modification vulnerability that stems from a missing...
WordPress Zakra plugin <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import vulnerability
Missing Authorization to Subscriber+ Demo Import vulnerability discovered by Dmitrii Ignatyev in WordPress Theme Zakra versions = 4.1.5...
