MAL-2025-24120 Malicious code in just-the-docs (npm)

The package just-the-docs was found to contain malicious code...

Malicious code in adform-docs (npm)

The package adform-docs was found to contain malicious code...

Malicious code in otc-docs-language (npm)

The package otc-docs-language was found to contain malicious code...

Malicious code in docs-reminder-action (npm)

The package docs-reminder-action was found to contain malicious code...

MAL-2025-28608 Malicious code in otc-docs-language (npm)

The package otc-docs-language was found to contain malicious code...

MAL-2025-32878 Malicious code in secure-docs-app (npm)

The package secure-docs-app was found to contain malicious code...

Malicious code in bb-docs-dgeni (npm)

The package bb-docs-dgeni was found to contain malicious code...

MAL-2025-18573 Malicious code in docs-reminder-action (npm)

The package docs-reminder-action was found to contain malicious code...

MAL-2025-15530 Malicious code in bb-docs-dgeni (npm)

The package bb-docs-dgeni was found to contain malicious code...

Cisco Secure Firewall Management Center Software HTML Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated document. This vulnerability is due to improper validation of user-supplied data. An...

PT-2025-33417

Name of the Vulnerable Software and Affected Versions: HCL Connections Docs affected versions not specified Description: HCL Connections Docs may not properly validate uploaded documents, potentially leading to a denial of service due to resource exhaustion. Recommendations: At the moment, there ...

CVE-2025-31987: Asymmetric Resource Consumption (Amplification)

HCL Connections Docs may mishandle validation of certain uploaded documents leading to denial of service due to resource exhaustion...

HCL Connections Docs 安全漏洞

HCL Connections Docs is a documentation site of HCL India. A security vulnerability exists in HCL Connections Docs version 2.0.2, which stems from improper validation of uploaded documents and could result in a denial of service due to resource exhaustion...

Fedora: Security Advisory (FEDORA-2025-1a9ad70c05)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, knative-operator, cloud-provider-azure-fips, azure-service-operator, teleport, knative-serving-fips, harbor-registry, cargobump, cilium, grafana-operator-fips, sbom-convert, incert, argo-cd, rekor, aws-signer-notation-plugin,...

Malicious code in sendbird-docs-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b8e9f1e70bd8605ecac970f5651ab351d6560a0001119746388c77f590ba4d4 The OpenSSF Package Analysis project identified 'sendbird-docs-validation' @ 1005.0.1 npm as malicious. It is considered malicious because: - Th...

MAL-2025-6800 Malicious code in sendbird-docs-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b8e9f1e70bd8605ecac970f5651ab351d6560a0001119746388c77f590ba4d4 The OpenSSF Package Analysis project identified 'sendbird-docs-validation' @ 1005.0.1 npm as malicious. It is considered malicious because: - Th...

mcp-package-docs vulnerable to command injection in several tools

Summary A command injection vulnerability exists in the mcp-package-docs MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code...

Arbitrary Command Injection

Overview mcp-package-docs is an An MCP server that provides LLMs with efficient access to package documentation across multiple programming languages Affected versions of this package are vulnerable to Arbitrary Command Injection via unsanitized input passed to the exec function. An attacker can...

CVE-2025-6380

The ONLYOFFICE Docs plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within its oo.callback REST endpoint in versions 1.1.0 to 2.2.0. The plugin’s permission callback only verifies that the supplied, encrypted attachment ID maps to an existing attachment pos...