Malicious code in jupiter-charlie-dzri (npm)

The package jupiter-charlie-dzri was found to contain malicious code...

Malicious code in dwarf-jupiter-e8xo (npm)

The package dwarf-jupiter-e8xo was found to contain malicious code...

Malicious code in jupiter-whiskey-274n (npm)

The package jupiter-whiskey-274n was found to contain malicious code...

MAL-2025-24103 Malicious code in jupiter-rainbow-9ldu (npm)

The package jupiter-rainbow-9ldu was found to contain malicious code...

MAL-2025-19011 Malicious code in dwarf-jupiter-e8xo (npm)

The package dwarf-jupiter-e8xo was found to contain malicious code...

MAL-2025-24106 Malicious code in jupiter-whiskey-274n (npm)

The package jupiter-whiskey-274n was found to contain malicious code...

MAL-2025-24104 Malicious code in jupiter-teak-lsdh (npm)

The package jupiter-teak-lsdh was found to contain malicious code...

MAL-2025-17903 Malicious code in cz-conventional-changelog-css-minimizer-webpack-plugin-electron-jupiter (npm)

The package cz-conventional-changelog-css-minimizer-webpack-plugin-electron-jupiter was found to contain malicious code...

MAL-2025-38692 Malicious code in vulcan-jupiter-scripts-module (npm)

The package vulcan-jupiter-scripts-module was found to contain malicious code...

MAL-2025-24100 Malicious code in jupiter-kangaroo-39yk (npm)

The package jupiter-kangaroo-39yk was found to contain malicious code...

MAL-2025-24098 Malicious code in jupiter-deneb-galaxy-greatfilter (npm)

The package jupiter-deneb-galaxy-greatfilter was found to contain malicious code...

CVE-2025-0365

The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.8.7 via the inline SVG feature. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server,...

CVE-2024-12033

The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the synclibraries function in all versions up to, and including, 4.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to sync libraries...

CVE-2024-12316

The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportpopupaction function in all versions up to, and including, 4.8.5. This makes it possible for unauthenticated attackers to export popup templates...

CVE-2023-3813

The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file downloads in versions up to, and including, 4.6.6. This makes it possible for unauthenticated attackers to download the contents of arbitrary files on the server, which can contain sensitive information. The requires the...

CVE-2023-48887

A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request...

CVE-2022-1658

Vulnerable versions of the Jupiter Theme = 6.10.1 allow arbitrary plugin deletion by any authenticated user, including users with the subscriber role, via the abbremoveplugin AJAX action registered in the framework/admin/control-panel/logic/plugin-management.php file. Using this functionality, an...

CVE-2020-6374

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation.jt file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper...

CVE-2006-2105

Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." sequences terminated by a %00 null character in the n parameter...

CVE-2025-3888

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File inclusion in all versions up to, and including, 4.8.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...