MAL-2025-43952 Malicious code in deimos-eslint-plugin-remark-spica (npm)

The package deimos-eslint-plugin-remark-spica was found to contain malicious code...

MAL-2025-45796 Malicious code in remark-callisto-reveal-md-chai (npm)

The package remark-callisto-reveal-md-chai was found to contain malicious code...

MAL-2025-45800 Malicious code in remark-pulsar-vortex-lint-staged (npm)

The package remark-pulsar-vortex-lint-staged was found to contain malicious code...

MAL-2025-45527 Malicious code in pavo-juno-thermochronology-remark (npm)

The package pavo-juno-thermochronology-remark was found to contain malicious code...

MAL-2025-46443 Malicious code in umbra-luna-wasat-remark (npm)

The package umbra-luna-wasat-remark was found to contain malicious code...

Malicious code in remark-celeste-hydra-cressida (npm)

The package remark-celeste-hydra-cressida was found to contain malicious code...

Malicious code in deimos-eslint-plugin-remark-spica (npm)

The package deimos-eslint-plugin-remark-spica was found to contain malicious code...

MAL-2025-45799 Malicious code in remark-exoplanetology-meissa-astro (npm)

The package remark-exoplanetology-meissa-astro was found to contain malicious code...

Malicious code in umbra-luna-wasat-remark (npm)

The package umbra-luna-wasat-remark was found to contain malicious code...

Malicious code in remark-callisto-reveal-md-chai (npm)

The package remark-callisto-reveal-md-chai was found to contain malicious code...

MAL-2025-45722 Malicious code in quark-socketio-configstore-remark (npm)

The package quark-socketio-configstore-remark was found to contain malicious code...

MAL-2025-45797 Malicious code in remark-celeste-hydra-cressida (npm)

The package remark-celeste-hydra-cressida was found to contain malicious code...

MAL-2025-45798 Malicious code in remark-charon-await-kinetic (npm)

The package remark-charon-await-kinetic was found to contain malicious code...

CVE-2025-50976

IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2025-50976

IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2025-50976

IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2025-50976

IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2025-50976: Improper Neutralization of Input During Web Page Generation

IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2025-50976

The IPFire 2.29 DNS management interface, specifically the dns.cgi component, is vulnerable to a reflected cross-site scripting (XSS) attack. This issue is caused by a failure to properly sanitize user-supplied input within the NAMESERVER , REMARK , and TLS_HOSTNAME query parameters. While the vu...

PT-2025-34800 · Ipfire · Ipfire

Name of the Vulnerable Software and Affected Versions: IPFire version 2.29 Description: The DNS management interface dns.cgi in IPFire fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS HOSTNAME query parameters. This results in a reflected cross-site scripting XSS...