586 matches found
Exploit for CVE-2026-48732
CVE-2026-48732: Warp Remote SSH cwd Command Injection PoC...
PT-2026-48373
Name of the Vulnerable Software and Affected Versions Warp versions 0.2025.04.09.08.11.stable 00 through 0.2026.05.06.15.42.stable 00 Description Warp contains a command execution policy bypass within its Agent code search tools. The Grep and FileGlob actions, which are authorized as read or sear...
PT-2026-48391
Name of the Vulnerable Software and Affected Versions Warp versions 0.2025.08.06.08.12.stable 00 through 0.2026.05.06.15.41.stable 01 Description A command injection exists in the prompt branch selector. An attacker who publishes a crafted branch name to a Git repository can execute arbitrary...
MAL-2026-4727 Malicious code in weavedb-warp-contracts-plugin-deploy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98f87e329831590a7416ca47a949a7b21cf8e948491e875d8359ca8d5cc5959 package.json declares "preinstall": "./tools/setup", which is a 976 KB Linux x8664 ELF binary shipped in the tarball with no source, no build system,...
Malicious code in warp-contracts-plugin-deploy-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3a02c9f004d72f8975e0e93fb0810818b509cf295cf9a567c882afaf9a7444 Package name warp-contracts-plugin-deploy-test mimics the legitimate warp-contracts-plugin-deploy and copies its public API surface lib/cjs/index.js...
MAL-2026-4712 Malicious code in warp-contracts-plugin-deploy-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3a02c9f004d72f8975e0e93fb0810818b509cf295cf9a567c882afaf9a7444 Package name warp-contracts-plugin-deploy-test mimics the legitimate warp-contracts-plugin-deploy and copies its public API surface lib/cjs/index.js...
Astra Linux – Vulnerability in xorg-server
A use-after-free flaw was detected in the xorg-x11-server. A X server crash may occur in a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode if the pointer is moved from one screen’s window to the root window of another screen, a...
📄 Samsung QuramDng Warp Out-Of-Bounds Read
This python proof of concept demonstrates an out-of-bounds read vulnerability in Samsung's QuramDng image processing library, triggered via a specially crafted DNG Digital Negative file. The script programmatically builds a minimal but valid DNG file containing a malformed WarpRectilinear opcode,...
CVE-2024-41997
An issue was discovered in version of Warp Terminal prior to 2024.07.18 v0.2024.07.16.08.02. A command injection vulnerability exists in the Docker integration functionality. An attacker can create a specially crafted hyperlink using the warp://action/docker/opensubshell intent that when clicked ...
Exploit for CVE-2024-41997
Warp Terminal RCE CVE-2024-41997 Command injection via unsa...
EUVD-2025-175652
Malicious code in warp-luminescence-ionosphere-baryon npm...
EUVD-2025-177864
Malicious code in meteor-command-warp-colors npm...
EUVD-2025-175656
Malicious code in warp-dotenv-safe-andromeda-uglify-js npm...
EUVD-2025-177379
Malicious code in paleobotany-warp-less-uranology npm...
EUVD-2025-178770
Malicious code in ganymede-server-test-warp npm...
EUVD-2025-175655
Malicious code in warp-elara-leda-bulma npm...
EUVD-2025-175654
Malicious code in warp-hyperion-quasar-quark npm...
Malicious code in oscillation-leda-warp-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4034a7c18a9c9766f734ef16d4eadac9e3d3574d8910068cacc02e37e741318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...