EUVD-2024-0901

Malicious code in bioql PyPI...

Malicious code in @zalastax/nolb-arrp (npm)

The package @zalastax/nolb-arrp was found to contain malicious code...

MAL-2025-10705 Malicious code in @zalastax/nolb-arrp (npm)

The package @zalastax/nolb-arrp was found to contain malicious code...

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

Path traversal in flaskcode Devan-Kerman ARRP

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

CVE-2024-24042

The CVE-2024-24042 entry affects Devan-Kerman ARRP versions 0.8.1 and earlier, with a directory traversal vulnerability in the RuntimeResourcePackImpl component that can allow remote code execution via the dumpDirect endpoint. Connected sources confirm the affected software and the vulnerable fun...

ARRP Security Vulnerabilities

ARRP is an advanced runtime resource package from the individual developer Devan Kerman. A security vulnerability exists in ARRP v.0.8.1 and earlier versions, which stems from a directory traversal vulnerability that allows remote attackers to execute arbitrary code via dumpDirect in the...

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

PT-2024-20252 · Unknown · Devan-Kerman Arrp

Name of the Vulnerable Software and Affected Versions: Devan-Kerman ARRP versions 0.8.1 and before Description: The issue allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component. This enables the attacker to potentially access and manipulate file...