31544 matches found
Malicious code in tiny-model-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a69a5156f95b3b1ddd3a9c0ddd7e1fad0cdd92841e56dc6ea7b950a35a5eb34 The package tiny-model-update was found to contain malicious code. Source: ghsa-malware...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a synchronization external abort, which could lead to a synchronization external abort error when unbinding...
CVE-2025-68327
In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: Fix synchronous external abort on unbind A synchronous external abort occurs on the Renesas RZ/G3S SoC if unbind is executed after the configuration sequence described above: modprobe usbfecm modprobe...
CVE-2025-9343
creationtimestamp| type| source ---|---|--- 2025-12-21 04:05:00+00:00| seen| https://infosec.exchange/users/offseq/statuses/115755574768340057 2025-12-21 04:05:02+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mahtp2os7w2z 2025-12-22 11:36:42+00:00| seen|...
VulnCheck KEV: CVE-2025-11953
The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...
CVE-2023-53959
creationtimestamp| type| source ---|---|--- 2025-12-20 00:13:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maewcgaidu22 2025-12-20 10:32:13+00:00| seen| https://gist.github.com/Darkcrai86/98bde2627967f6323ddf3a1cd41e1bc6 2025-12-20 10:58:16+00:00| seen|...
GHSA-F43R-CC68-GPX4 External Control of File Name or Path in Langflow
Vulnerability Overview If an arbitrary path is specified in the request body's fspath, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction, normalization, or allowed directory enforcement, so absolute paths e.g., /etc/poc.txt ar...
External Control of File Name or Path in Langflow
Vulnerability Overview If an arbitrary path is specified in the request body's fspath, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction, normalization, or allowed directory enforcement, so absolute paths e.g., /etc/poc.txt ar...
CVE-2025-68382
Out-of-bounds read CWE-125 allows an unauthenticated remote attacker to perform a buffer overflow CAPEC-100 via the NFS protocol dissector, leading to a denial-of-service DoS through a reliable process crash when handling truncated XDR-encoded RPC messages...
External Control of File Name or Path
Overview Affected versions of this package are vulnerable to External Control of File Name or Path via the fspath parameter in the request body. An attacker can overwrite or create arbitrary files within the server's file system by specifying absolute or relative paths, potentially leading to...
CVE-2025-68478
Langflow CVE-2025-68478 affects versions prior to 1.7.0. An authenticated user can specify an arbitrary path in the request body fs_path; the server serializes the Flow to JSON and writes it to that path without path validation or directory restrictions. This enables potential overwriting or crea...
CVE-2025-68478 Langflow Vulnerable to External Control of File Name or Path
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's fspath, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction,...
MAL-2025-192661 Malicious code in adel-xnetgpt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85b321aa51079c32d9640eb5619d6350f409dc14f26141a99a5744932ddee14 The package adel-xnetgpt was found to contain malicious code. Source: ghsa-malware 0ebdfb3056af9b8e58d8ce4bc938a77b985744ece2a3de14f4b691d2b97ca3ad A...
MAL-2025-192662 Malicious code in adeliana-xnetgpt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f83c4bf47eb41e57e89cb19f6d28796be0fbc39ff598db3ae6f04d87500fb7a The package adeliana-xnetgpt was found to contain malicious code. Source: ghsa-malware 780aa557a66927e031b481d2f7add1e807605370d094563885c82f533a7ab7...
Malicious code in sonia3-npm-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 339534853ebcb623a903a0515ab9ae854edaac8fdfec58d3edb454c501238d19 The package sonia3-npm-js was found to contain malicious code. Source: ghsa-malware 3b951ad6a6c46f78a032c0c93db496b6b13cfadccf178f195cd6c3f28531ed1e...
XXE (XML External Entity Injection) in Crowd Data Center and Server
This High severity XXE XML External Entity Injection vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. This XXE XML External Entity Injection vulnerability, with a CVSS Score of 7.9, allows an authenticated attacker to access local and remote content which has high...
Malicious code in android_teminator_x (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c3191c5716cf98ab9a5976d22602d3140a131b7f906d2c51d88f60950e1a7a The package androidteminatorx was found to contain malicious code. Source: ghsa-malware...
Malicious code in ctfparsertna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cd5612214cb1fd0ed34899c5e686c4fdbecb4a820e170a3589987c20b9b3da The package ctfparsertna was found to contain malicious code. Source: ghsa-malware 90b9a48b58422c5d9853769c983bd04388558c312be191e3bfd8a82158214d38 A...
Malicious code in tnactgfds (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc53eec6bc0141b35cd02a25f78b5c7862e6b8ed845eb0b47da084b5d3582396 The package tnactgfds was found to contain malicious code. Source: ghsa-malware 40a7fc6d425dcaf14cd401ae7c14ef495455f779891345d9844a6465c7d4f795 Any...
