7562 matches found
MAL-2025-32531 Malicious code in ruby-kafka-oauth-client (npm)
The package ruby-kafka-oauth-client was found to contain malicious code...
Malicious code in oauth-procyon-sequelize-dendrochronology (npm)
The package oauth-procyon-sequelize-dendrochronology was found to contain malicious code...
MAL-2025-23286 Malicious code in interstellarmedium-configstore-dotenv-safe-oauth (npm)
The package interstellarmedium-configstore-dotenv-safe-oauth was found to contain malicious code...
MAL-2025-23609 Malicious code in janus-meteor-toml-oauth (npm)
The package janus-meteor-toml-oauth was found to contain malicious code...
MAL-2025-28253 Malicious code in oortcloud-biohacking-oauth-cladistics (npm)
The package oortcloud-biohacking-oauth-cladistics was found to contain malicious code...
MAL-2025-27636 Malicious code in node-oauth-walkthrough (npm)
The package node-oauth-walkthrough was found to contain malicious code...
CVE-2025-54382
Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution RCE vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirecti...
CVE-2025-54382
Cherry Studio (desktop client) version 1.5.1 is affected by an RCE vulnerability when connecting to streamableHttp MCP servers due to the server’s implicit trust in OAuth redirection URLs and improper URL sanitization. The issue is mitigated by upgrading to version 1.5.2. Exploitation status is n...
CVE-2025-54074: Improper Neutralization of Special Elements used in an OS Command
Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicious MCP server with compatible OAuth...
CVE-2025-54382: Improper Neutralization of Special Elements used in an OS Command
Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution RCE vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirecti...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: cluster-autoscaler, falcoctl-fips, gomplate, kube-rbac-proxy, temporal-ui-server-fips, conftest, cilium-certgen, azure-aad-pod-identity-mic, cert-manager-cmctl, cloudnative-pg, karpenter, conjur-cli, aws-sigv4-proxy-fips, kubelet-csr-approver-fips,...
Malicious code in react-native-kraken-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6dd9f629078cdad7b927b9f85f1d8b3a5d381a6009e08c65eafca6272b20cbf2 The OpenSSF Package Analysis project identified 'react-native-kraken-oauth' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2025-6806 Malicious code in react-native-kraken-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6dd9f629078cdad7b927b9f85f1d8b3a5d381a6009e08c65eafca6272b20cbf2 The OpenSSF Package Analysis project identified 'react-native-kraken-oauth' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
PT-2025-32408 · Unknown · Zlt2000 Microservices-Platform
Name of the Vulnerable Software and Affected Versions: zlt2000 microservices-platform versions through 6.0.0 Description: A problematic issue exists in zlt2000 microservices-platform. The issue is related to an open redirect vulnerability within the onLogoutSuccess function located in the file...
WakaTime: Double Clickjacking Attack on WakaTime OAuth Authorization Flow at https://wakatime.com/oauth/authorize
The WakaTime OAuth authorization flow was vulnerable to a double-clickjacking attack. The attack allowed an attacker to trick users into unknowingly clicking the "Connect my WakaTime account" button in the consent dialog, enabling the attacker to register an OAuth application, capture the...
Attackers Use Fake OAuth Apps with Tycoon Kit to Breach Microsoft 365 Accounts
Cybersecurity researchers have detailed a new cluster of activity where threat actors are impersonating enterprises with fake Microsoft OAuth applications to facilitate credential harvesting as part of account takeover attacks. "The fake Microsoft 365 applications impersonate various companies,...
Attackers Use Fake OAuth Apps with Tycoon Kit to Breach Microsoft 365 Accounts
Cybersecurity researchers have detailed a new cluster of activity where threat actors are impersonating enterprises with fake Microsoft OAuth applications to facilitate credential harvesting as part of account takeover attacks. "The fake Microsoft 365 applications impersonate various companies,...
CVE-2025-6505
Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials from different sources, potentially leading to client impersonation and unauthorized access. Whe...
ROS-20250731-01
Vulnerability in the implementation of OAuth request signing logic for Python OAuthLib is due to insufficient user data validation in urivalidate functions. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...