CVE-2025-3248

POC - Un atacante remoto y no autenticado puede enviar solicitudes HTTP manipuladas para ejecutar código arbitrario - CVE-2025-3248 Resumen Las versiones de Langflow anteriores a 1.3.0 son susceptibles a la inyección de código en el endpoint /api/v1/validate/code. Un atacante remoto y no...

CVE-2024-48990

CVE-2024-48990 Exploit para CVE-2024-48990 Escalada de privilegios local en needrestart 3.8 Antecedentes Lee https://blog.qualys.com/vulnerabilities-threat-research/2024/11/19/qualys-tru-uncovers-five-local-privilege-escalation-vulnerabilities-in-needrestart. Qualys hace un gran trabajo...

Malicious code in dotenv-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d22963a1f1fabe3a8b3f54efcb5053761d385486093200765745297ac2bd16 The package impersonates the dotenv API but on module load and again when the bundled CLI runs invokes a function named dispatchAnalytics in...

Malicious code in dotenv-promises (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254f0bcbb8014fb07414eb0b41a898deac682aa8c8b7a8541a0f7538ac274f9a The package is published as 'dotenv-promises' but its bundled manifest declares the internal name '[email protected]' and mimics the dotenv API...

MSC-EvilTwin-Local-Privilege-Escalation

CVE-2025-26633 - Consola de administración de Microsoft .msc EvilTwin PoC de escalada de privilegios local Día cero en el momento de la divulgación marzo de 2025 – Explotado activamente en la naturaleza por Water Gamayun APT SOLO PARA PRUEBAS DE SEGURIDAD E INVESTIGACIÓN AUTORIZADAS Detalles de l...

Malicious code in studiocode_eligibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49b1af8bbf0463bb38d3049e59c28b0dcc8d2e3e5ef54611b4e77bddfdd36dc package.json declares a postinstall hook wscript.exe 4444.vbs that automatically executes a 765KB VBScript shipped in the tarball on Windows...

CVE-2021-40870

CVE-2021-40870 Aviatrix permite a un usuario autenticado ejecutar código arbitrario...

CVE-2022-29337

CVE-2022-29337 C-DATA FD702XW-X-R430 v2.1.13X001 se descubrió que contiene una vulnerabilidad de inyección de comandos a través del parámetro vacmd en formlanipv6. Esta vulnerabilidad permite a los atacantes ejecutar comandos arbitrarios a través de una solicitud HTTP manipulada...

Malicious code in @nagular/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac4933487fc7ccf7161933c9d5f6965b5e1f0a3efeaf8ea5349096835008557 The package's package.json declares a preinstall lifecycle script that runs curl -L...

Malicious code in @angulra/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebb04f93b463536e56e0160e0e1fc2748d69c9eb15f991e990365cee7852a34 The package.json preinstall script runs curl -L...

Malicious code in @angulra/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3158beab2ea0d9f8e28d488f124268c8c9a00a3a0f5599823c4d13f741ac40f The package name @angulra/cli is a character-swap of @angular/cli and copies the legitimate Angular CLI's metadata description, repository, homepage,...

MAL-2026-17495 Malicious code in @angulra/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3158beab2ea0d9f8e28d488f124268c8c9a00a3a0f5599823c4d13f741ac40f The package name @angulra/cli is a character-swap of @angular/cli and copies the legitimate Angular CLI's metadata description, repository, homepage,...

Malicious code in @angularr/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122d8c8fdbfe9bd590dd3e1c41a6afcefff4f1c552af5f1756577975c84878a8 Package is published as @angularr/cli double 'r' and copies @angular/cli's description, keywords, homepage, repository URL, README, and version strin...

MAL-2026-17492 Malicious code in @angularr/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122d8c8fdbfe9bd590dd3e1c41a6afcefff4f1c552af5f1756577975c84878a8 Package is published as @angularr/cli double 'r' and copies @angular/cli's description, keywords, homepage, repository URL, README, and version strin...

CVE-2026-105220

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories that executes markup from imported story files in the editor window. Attackers can craft a story file whose script calls the twineElectron openWithScratchFile IPC bridge to write and open a .bat file,...

Malicious code in core-js-gnz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc57686b95f827f2c3b0501d97b6575e077247255bf5d4227ae9bc8bedd43937 On install, package.json runs node init.js as a postinstall hook. init.js collects host identifiers os.hostname, os.userInfo.username, os.platform,...

jscythe

jscythe 滥用 Node.js 的检查器机制，以强制任何基于 Node.js/Electron/v8 的进程执行任意 JavaScript 代码，即使其调试功能已被禁用。 已在 Visual Studio Code、Discord、任何 Node.js 应用程序等环境中测试并运行！ 使用方法 1. 定位目标进程。 2. 向进程发送 SIGUSR1 信号，这将在某个端口上启用调试器（具体端口取决于软件，有时是随机的，有时是固定的）。 3. 通过对比发送 SIGUSR1 前后的开放端口差异，确定调试端口。 4. 从 http://localhost:/json 获取 WebSocket...

Malicious code in express-enhanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d6ce3e4c988439e6023bb900fde41c1a7eebe0c372eddc3a3c3c9d8206a9d6 [email protected] impersonates the express package: it ships the express README verbatim, declares TJ Holowaychuk as author, and points reposito...

CVE-2026-105220

A flaw was found in Twine. The application fails to properly sanitize markup during story import, allowing embedded malicious scripts to execute within the editor interface. By convincing a user to import a specially crafted story file, an attacker can leverage an internal inter-process...

CVE-2019-7609

CVE-2019-7609 Las versiones de Kibana anteriores a 5.6.15 y 6.6.1 contienen una falla de ejecución de código arbitrario en el visualizador Timelion. Un atacante con acceso a la aplicación Timelion podría enviar una solicitud que intente ejecutar código JavaScript. Esto podría llevar a que un...