AlmaLinux 10 : nodejs22 (ALSA-2025:8493)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:8493 advisory. nodejs: Remote Crash via SignTraits::DeriveBits in Node.js CVE-2025-23166 Tenable has extracted the preceding description block directly from the AlmaLinux securi...

GHSA-35G6-RRW3-V6XC FlowiseAI/Flosise has File Upload vulnerability

Summary A file upload vulnerability in FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web shells on the server, potentially leading to Remote Code Execution RCE. Details The system fails to...

EUVD-2019-0204

Malware in sbrugna...

EUVD-2019-0336

Malware in sbrugna...

EUVD-2019-0266

Malware in sbrugna...

EUVD-2019-0249

Malware in sbrugna...

EUVD-2021-2085

Malware in sbrugna...

EUVD-2021-0889

Malware in sbrugna...

EUVD-2019-0359

Malware in sbrugna...

EUVD-2019-0330

Malware in sbrugna...

EUVD-2019-16203

Malware in sbrugna...

EUVD-2020-27131

Malware in sbrugna...

EUVD-2019-3701

Malware in sbrugna...

EUVD-2018-0666

Malware in sbrugna...

EUVD-2017-0340

Malware in sbrugna...

Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680625)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680625 advisory. Accepting arbitrary Subject Alternative Name SAN types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained...

Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680626 advisory. Due to the formatting logic of the console.table function it was not safe to allow user controlled input to be passed to the properties parameter while simultaneousl...

CVE-2025-61687 FlowiseAI/Flosise has File Upload vulnerability

Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web...

ROS-20251006-11

A vulnerability in the permissions model of the Node.js software platform is related to flaws in the processing of HTTP requests. Exploitation of the vulnerability could allow a remote attacker to bypass existing security restrictions and send unauthorized requests. existing security restrictions...

RockyLinux 10 : nodejs22 (RLSA-2025:8493)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8493 advisory. nodejs: Remote Crash via SignTraits::DeriveBits in Node.js CVE-2025-23166 Tenable has extracted the preceding description block directly from the...