EUVD-2025-34231

Mailgen has HTML Injection and XSS Filter Bypass in Plaintext Emails...

CVE-2025-62366

mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions through 2.0.30 contain an HTML injection vulnerability in plaintext emails produced by the generatePlaintext method when user‑generated content is supplied. The function attempts t...

Heap buffer overflow in websocket

An heap-based buffer overflow vulnerability CWE-122 in FortiOS, FortiProxy, FortiPAM, FortiSRA and FortiSwitchManager nodejs daemon may allow an authenticated attacker to execute arbitrary code or commands via specifically crafted requests...

Malicious code in redirect-j8m62u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a45464226511d36e1577cefa67e4d6eeabc65682d19be60c094416acaeb3d94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AlmaLinux 10 : nodejs22 (ALSA-2025:8493)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:8493 advisory. nodejs: Remote Crash via SignTraits::DeriveBits in Node.js CVE-2025-23166 Tenable has extracted the preceding description block directly from the AlmaLinux securi...

GHSA-35G6-RRW3-V6XC FlowiseAI/Flosise has File Upload vulnerability

Summary A file upload vulnerability in FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web shells on the server, potentially leading to Remote Code Execution RCE. Details The system fails to...

EUVD-2019-16203

Malware in sbrugna...

EUVD-2020-27131

Malware in sbrugna...

EUVD-2019-0266

Malware in sbrugna...

EUVD-2019-0336

Malware in sbrugna...

EUVD-2019-0249

Malware in sbrugna...

EUVD-2017-0340

Malware in sbrugna...

EUVD-2021-0889

Malware in sbrugna...

EUVD-2019-0359

Malware in sbrugna...

EUVD-2019-0330

Malware in sbrugna...

EUVD-2019-0204

Malware in sbrugna...

EUVD-2018-0666

Malware in sbrugna...

EUVD-2019-3701

Malware in sbrugna...

EUVD-2021-2085

Malware in sbrugna...

Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680625)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680625 advisory. Accepting arbitrary Subject Alternative Name SAN types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained...