CVE-2025-42894

Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system...

CVE-2025-42892

Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating...

CVE-2025-42894

SAP Business Connector is affected by a Path Traversal vulnerability. An attacker authenticated as an administrator with adjacent access can read, write, overwrite, and delete arbitrary files on the host, potentially enabling execution of arbitrary OS commands and full system compromise. The issu...

CVE-2025-42894 Path Traversal vulnerability in SAP Business Connector

Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system...

CVE-2025-42892 OS Command Injection vulnerability in SAP Business Connector

Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating...

CVE-2025-42887 Code Injection vulnerability in SAP Solution Manager

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...

MAL-2025-66546 Malicious code in npmtest_chenguang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f702a0658de936fc3084652027ce0383b048954aef2f39b5783af8edb2e8c7de The package npmtestchenguang was found to contain malicious code. Source: ghsa-malware c6f729e82fdac96b8daaca470b095362e03a02d531c217553f57ffb104cd93...

Malicious code in szsec-infos-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f7d0f83d7810b53b86603e822f34d4b2829f2f0ee8853839340239d99b8388 The package szsec-infos-report was found to contain malicious code. Source: ghsa-malware...

MAL-2025-66550 Malicious code in szsec-infos-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f7d0f83d7810b53b86603e822f34d4b2829f2f0ee8853839340239d99b8388 The package szsec-infos-report was found to contain malicious code. Source: ghsa-malware...

PT-2025-46228

Name of the Vulnerable Software and Affected Versions SAP Solution Manager affected versions not specified Description SAP Solution Manager is susceptible to a code injection issue stemming from inadequate input sanitization. An authenticated attacker can inject malicious code by calling a...

MAL-2025-66544 Malicious code in grid-settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b0798fc09c824e110a36baea640ebc023c337f246ab9cc2b6647eb4b9bddad The package grid-settings was found to contain malicious code. Source: ghsa-malware 4461bdacbed2361a56a39a0251d7a47f2454616c944b5380680198ea97f7ef20...

MAL-2025-66543 Malicious code in @walletwave/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e6b9673bf6056f0f870d3aa6ad6c4e83ef1a3bf3b58a601dc9cae80d673390 The package @walletwave/ui was found to contain malicious code. Source: ghsa-malware 42ec23f1a72e982a80ced819057ca03a0d26999dc6b7417343456de67a35ec46...

MAL-2025-55022 Malicious code in chai-as-sorted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0a3502254657767ec819133929d33c2b84f1d9607acc89e9557de2b80e9bed The package chai-as-sorted was found to contain malicious code. Source: ghsa-malware 0a769064bb46785af26b5ee4af98633de26f88bcad7b199c113bdf52940e195a...

Malicious code in web-vitals-help (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204b3a82026288b65a149e983d855812d21ccc8c61952dcb037c926c2b3a3452 The package web-vitals-help was found to contain malicious code. Source: ghsa-malware 93e30ad20be59206c5d91e0d2bff19f6c6969c69dc3ebc477ae0c980cc3d242...

MAL-2025-55021 Malicious code in web-vitals-help (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204b3a82026288b65a149e983d855812d21ccc8c61952dcb037c926c2b3a3452 The package web-vitals-help was found to contain malicious code. Source: ghsa-malware 93e30ad20be59206c5d91e0d2bff19f6c6969c69dc3ebc477ae0c980cc3d242...

Malicious code in @mts-ds/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0112c17ea22a1384f1973813b785859e61805e29b2027b835dfa81c022bd846e The package @mts-ds/icons was found to contain malicious code. Source: ghsa-malware b51afa604dd61e1408dc95f628c00b6b379d7191214d2b77258a2a97f0cb38e4...

Malicious code in phantom-fixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a29d0b7233f4c6d8534448b0202eaddc448817008782120ede8110b31b010d The package phantom-fixer was found to contain malicious code. Source: ghsa-malware 08b29349698428ef5ef1924bece07e739b2c0dc4ee6be172dba838e6c5e4dabd...

MAL-2025-49387 Malicious code in xss-payload-7n-ctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9fcaefcc21332259306a4bbad6a54cda89ef8c6d4874d5176f4bf8f9cb194c The package xss-payload-7n-ctf was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwindcss-twflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ae450cb567421e91b0d5a8fbe5904a5136ecfcb74a4a78ad0244beac01d011 The package tailwindcss-twflare was found to contain malicious code. Source: ghsa-malware...

Malicious code in @chatclub/claude-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6acfccb78a615c7f037fe5dbd1001d9a77ca4015c89c94122ba5dd78978b66b The package @chatclub/claude-code was found to contain malicious code. Source: ghsa-malware...