CVE-2025-14498

TradingView Desktop Electron Uncontrolled Search Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of TradingView Desktop. An attacker must first obtain the ability to execute low-privileged code on the target...

Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN Installers

Cybersecurity researchers have disclosed details of an active malware campaign called Stealit that has leveraged Node.js' Single Executable Application SEA feature as a way to distribute its payloads. According to Fortinet FortiGuard Labs, select iterations have also employed the open-source...

EUVD-2021-0507

Malware in sbrugna...

EUVD-2021-2232

Malware in sbrugna...

EUVD-2019-10926

Malware in sbrugna...

EUVD-2021-19536

Malware in sbrugna...

EUVD-2025-9623

Malicious code in bioql PyPI...

EUVD-2023-2557

Malicious code in bioql PyPI...

EUVD-2024-54987

Malicious code in bioql PyPI...

EUVD-2022-6098

Malicious code in bioql PyPI...

EUVD-2023-2462

Malicious code in bioql PyPI...

EUVD-2023-2513

Malicious code in bioql PyPI...

EUVD-2023-3149

Malicious code in bioql PyPI...

EUVD-2022-7391

Malicious code in bioql PyPI...

EUVD-2024-54718

Malicious code in bioql PyPI...

EUVD-2022-5978

Malicious code in bioql PyPI...

EUVD-2022-1290

Malicious code in bioql PyPI...

CVE-2025-55305 Electron is vulnerable to Code Injection via resource modification

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions below 35.7.5, 36.0.0-alpha.1 through 36.8.0, 37.0.0-alpha.1 through 37.3.1 and 38.0.0-alpha.1 through 38.0.0-beta.6, ASAR Integrity Bypass via resource modification. This only impac...

Arbitrary Code Injection

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Arbitrary Code Injection via modification of the resources folder when the embeddedAsarIntegrityValidation...

Access of Resource Using Incompatible Type ('Type Confusion')

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' via the lack of limitation on max inlining ids ...