160 matches found
CVE-2021-37580
CVE-2021-37580 Support for single and batch verification of CVE-2021-37580 vulnerability Single URL detection: File batch verification:...
Malicious code in gugodapis (npm)
Dropper. At run time the package downloads a Windows batch file from a remote URL into the system temporary directory and executes it with childprocess.exec. The payload is fetched, not shipped, so the code that runs is controlled by the remote host. Version examined: 1.0.0; tarball SHA-256...
Malicious code in vs-modules (npm)
Source: amazon-inspector dcd50c73d1e9bbca9b707d80936562866b7469239c038a540c02a9f43efedb57 package.json declares a preinstall hook that runs node resources.js, which fires automatically on npm install. resources.js is heavily obfuscated with an obfuscator.io-style string-array plus numeric-index...
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
SummaryOn Windows, converting a notebook containing SVG output to a PDF results in unauthorized code execution. Specifically, a third party can create a inkscape.bat file that defines a Windows batch script, capable of arbitrary code execution.When a user runs jupyter nbconvert --to pdf on a...
Malicious code in ml2000 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871b57a598bf1230a64fa6ee85d442eb30f21915176835801871dc46c59cedf6 On invoking the ml2000 CLI with no arguments, interactivemenu in src/mllabs/generator.py writes a batch file and launches it via...
MAL-2026-4756 Malicious code in ml2000 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871b57a598bf1230a64fa6ee85d442eb30f21915176835801871dc46c59cedf6 On invoking the ml2000 CLI with no arguments, interactivemenu in src/mllabs/generator.py writes a batch file and launches it via...
CVE-2026-31999
OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that allows attackers to influence execution behavior through cwd manipulation. Remote attackers can exploit improper shell execution...
Investigating a New Click-Fix Variant
Disclaimer : This report has been prepared by the Threat Research Center to enhance cybersecurity awareness and support the strengthening of defense capabilities. It is based on independent research and observations of the current threat landscape available at the time of publication. The content...
PT-2026-26235
Summary On Windows, the Lobster extension previously retried certain spawn failures ENOENT/EINVAL with shell: true for wrapper compatibility. In that fallback path, tool-provided arguments could be interpreted by cmd.exe if fallback was triggered. Affected Packages / Versions - Package: openclaw...
📄 MajorDoMo Remote Command Injection / Race Condition
This Metasploit module exploits an unauthenticated command injection vulnerability in MajorDoMos remote command handler rc/index.php. The param parameter is interpolated into double quotes without escapeshellarg, and the resulting string is passed to safeexec which inserts it into the safeexecs...
Unauthorized Code Execution
nbconvert is vulnerable to unauthorized code execution. The vulnerability is due to improper handling of SVG-to-PDF conversion on Windows where a malicious inkscape.bat file in the working directory can be executed, which allows an attacker to run arbitrary code when a user performs the conversio...
PYSEC-2026-113
Use After Free vulnerability in Apache Arrow C++. This issue affects Apache Arrow C++ from 15.0.0 through 23.0.0. It can be triggered when reading an Arrow IPC file but not an IPC stream with pre-buffering enabled, if the IPC file contains data with variadic buffers such as Binary View and String...
[SECURITY] Fedora 42 Update: sad-0.4.32-4.fc42
Space Age seD - Batch File Edit tool. It will show you a really nice diff of proposed changes before you commit them...
[SECURITY] Fedora 43 Update: sad-0.4.32-4.fc43
Space Age seD - Batch File Edit tool. It will show you a really nice diff of proposed changes before you commit them...
CVE-2025-13818
Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management Agent...
CVE-2025-13818
Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management Agent...
CVE-2025-13818
Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management Agent...
CVE-2025-13818
Summary: CVE-2025-13818 is a local privilege escalation in the Windows version of ESET Management Agent due to insecure temporary batch file execution. Affected software: ESET Management Agent (Windows). Vulnerability: Local exploit via insecure handling of temporary batch files that can escalate...
