EUVD-2024-0901

Malicious code in bioql PyPI...

MAL-2025-10705 Malicious code in @zalastax/nolb-arrp (npm)

The package @zalastax/nolb-arrp was found to contain malicious code...

Malicious code in @zalastax/nolb-arrp (npm)

The package @zalastax/nolb-arrp was found to contain malicious code...

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

Path traversal in flaskcode Devan-Kerman ARRP

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

ARRP Security Vulnerabilities

ARRP is an advanced runtime resource package from the individual developer Devan Kerman. A security vulnerability exists in ARRP v.0.8.1 and earlier versions, which stems from a directory traversal vulnerability that allows remote attackers to execute arbitrary code via dumpDirect in the...

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

CVE-2024-24042

The CVE-2024-24042 entry affects Devan-Kerman ARRP versions 0.8.1 and earlier, with a directory traversal vulnerability in the RuntimeResourcePackImpl component that can allow remote code execution via the dumpDirect endpoint. Connected sources confirm the affected software and the vulnerable fun...

PT-2024-20252 · Unknown · Devan-Kerman Arrp

Name of the Vulnerable Software and Affected Versions: Devan-Kerman ARRP versions 0.8.1 and before Description: The issue allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component. This enables the attacker to potentially access and manipulate file...