4178 matches found
CVE-2025-52662
A vulnerability in Nuxt DevTools has been fixed in version 2.6.4. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools...
CVE-2025-52662
Nuxt DevTools contains an XSS vulnerability that could allow extraction of authentication tokens under certain configurations. The issue has been fixed in version 2.6.4, and users are advised to upgrade to mitigate the risk. Affected component: Nuxt DevTools; nature: cross-site scripting on the a...
PT-2025-45398
Name of the Vulnerable Software and Affected Versions Nuxt DevTools versions prior to 2.6.4 Description A flaw exists in Nuxt DevTools that could allow the extraction of Nuxt authentication tokens through a cross-site scripting XSS attack, under specific configurations. Recommendations Update to...
PT-2025-45798
A vulnerability in Nuxt DevTools has been fixed in version 2.6.4. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade...
CVE-2025-52662: Improper Neutralization of Input During Web Page Generation
A vulnerability in Nuxt DevTools has been fixed in version 2.6.4. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools...
Nuxt DevTools security vulnerabilities
Nuxt DevTools is an open source set of visualization tools from Nuxt. A security vulnerability exists in Nuxt DevTools version 2.6.4 that stems from the possibility of extracting Nuxt authentication tokens via cross-site scripting under certain configurations...
Exploit for OS Command Injection in Nestjs Devtools-Integration
PoC exploit for CVE-2025-54782, a vulnerability in an unspecifie...
Astra Linux – Vulnerability in Thunderbird
Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
devtools-integration Package Code Execution
The vulnerability of the devtools-integration package for Nest’s platform, which is used to create scalable server applications in Node.js, relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Exploit for Cross-Site Request Forgery (CSRF) in Nestjs Devtools-Integration
CVE-2025-54...
EUVD-2025-35150
Malicious code in @jdtaro/dynamic-devtools-utils npm...
Malicious Package
Overview @jdtaro/dynamic-devtools-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Malicious code in @jdtaro/dynamic-devtools-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31153e0cd25bffc9c1582e7fe176e131e49c4a1fdfdc58c55cdf25dcd99a5b55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2021-17538
Malware in sbrugna...
EUVD-2021-17487
Malware in sbrugna...
EUVD-2018-17864
Malware in sbrugna...
EUVD-2016-2722
Malware in sbrugna...
EUVD-2016-2794
Malware in sbrugna...