GHSA-8VCH-M3F4-Q8JF Elysia affected by arbitrary code injection through cookie config

Arbitrary code execution from cookie config. If dynamic cookies are enabled ie there exists a schema for cookies, the cookie config is injected into the compiled route without first being sanitised. Availability of this exploit is generally low, as it requires write access to either the Elysia...

Schneider Electric EcoStruxure Foxboro DCS Advisor

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...

Exploit for Prototype Pollution in Typeorm

CVE-2020-8158: TypeORM Prototype Pollution Vulnerability O...

SUSE CVE-2022-24785

Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm server users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This...

PT-2025-47302

Name of the Vulnerable Software and Affected Versions SourceCodester Train Station Ticketing System version 1.0 Description A SQL injection weakness exists in the Train Station Ticketing System. This issue is related to the manipulation of the Username argument within the login functionality,...

EUVD-2025-178601

Malicious code in hash-authorize-sanitize-signal-cloud npm...

EUVD-2025-179059

Malicious code in error-alpha-sanitize-sanitize-daemon npm...

EUVD-2025-179391

Malicious code in data-node-sanitize-balance-optimize npm...

EUVD-2025-180004

Malicious code in boolean-fork-uglify-dog-sanitize npm...

EUVD-2025-176526

Malicious code in sanitize-new-link-code-void npm...

EUVD-2025-179698

Malicious code in cluster-sanitize-resolve-omega-encrypt npm...

EUVD-2025-176525

Malicious code in sanitize-sed-transpile-analyze-sandbox npm...

EUVD-2025-178413

Malicious code in info-user-wind-book-sanitize npm...

MAL-2025-187281 Malicious code in hash-authorize-sanitize-signal-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6036f529790af1d972ea5481f35974ed1ddef51980d2dfd257f1206670838669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180008

Malicious code in book-sanitize-cat-cold-class npm...

EUVD-2025-175947

Malicious code in throw-omega-catch-hot-sanitize npm...

Malicious code in sanitize-eta-promise-error-awk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00d20cc45b0c3561f876e2907c05759af75b6ae061f01d2d3240a3aefde578d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180209

Malicious code in authorize-interface-good-xi-sanitize npm...

EUVD-2025-176212

Malicious code in static-transpile-sanitize-emulate-parse npm...

Malicious code in container-error-sanitize-authenticate-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042b588b7a0bd526a19fddc01c4ae5cd6e61d211c4638993593e8dcd9857ff31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...