203 matches found
Malicious code in lint-staged-ceres-metalsmith-non-blocking (npm)
The package lint-staged-ceres-metalsmith-non-blocking was found to contain malicious code...
Malicious code in umbriel-ceres-elara-global (npm)
The package umbriel-ceres-elara-global was found to contain malicious code...
Malicious code in ceres-capella-babel-commitlint (npm)
The package ceres-capella-babel-commitlint was found to contain malicious code...
Malicious code in ophiuchus-greatfilter-delphinus-ceres (npm)
The package ophiuchus-greatfilter-delphinus-ceres was found to contain malicious code...
MAL-2025-28353 Malicious code in ophiuchus-greatfilter-delphinus-ceres (npm)
The package ophiuchus-greatfilter-delphinus-ceres was found to contain malicious code...
MAL-2025-39496 Malicious code in writable-wavefunction-ceres-nebula (npm)
The package writable-wavefunction-ceres-nebula was found to contain malicious code...
MAL-2025-8546 Malicious code in @malware-test-ceres-borax-biped-lanky/test-mlw3-ceres-borax-biped-lanky (npm)
The package @malware-test-ceres-borax-biped-lanky/test-mlw3-ceres-borax-biped-lanky was found to contain malicious code...
MAL-2025-34574 Malicious code in taurus-ceres-configstore-pavo (npm)
The package taurus-ceres-configstore-pavo was found to contain malicious code...
CVE-2021-33633
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerability is associated with program files ceres/function/util.Py. This issue affects aops-ceres: from 1.3.0 through 1.4.1...
CVE-2021-33633
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerability is associated with program files ceres/function/util.Py. This issue affects aops-ceres: from 1.3.0 through 1.4.1...
CVE-2021-33633 Command Injection in aops-ceres
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerability is associated with program files ceres/function/util.Py. This issue affects aops-ceres: from 1.3.0 through 1.4.1...
CVE-2021-33633 Command Injection in aops-ceres
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerability is associated with program files ceres/function/util.Py. This issue affects aops-ceres: from 1.3.0 through 1.4.1...
openEuler 安全漏洞
openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler aops-ceres versions 1.3.0 through 1.4.1, which stems from a security issue in ceres/functions/util.Py that allows command injection...
PT-2024-10973 · Unknown +1 · Aops-Ceres +1
Name of the Vulnerable Software and Affected Versions: openEuler aops-ceres versions 1.3.0 through 1.4.1 Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection', which allows Command Injection. This problem is...
OESA-2024-1159 aops-ceres security update
An agent which needs to be adopted in client, it managers some plugins, such as gala-gopherkpi collection, fluentdlog collection and so on. Security Fixes: In versions 1.3.0-1.4.1 of the ceres software package, the executeshellcommand function does not properly verify or filter the command or...
ceresheilmittel.de Improper Access Control vulnerability OBB-3765422
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ceres.pl Cross Site Scripting vulnerability OBB-3573637
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ceresinternational.org Cross Site Scripting vulnerability OBB-2935702
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ceresinternational.org Cross Site Scripting vulnerability OBB-2829315
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ceres.site123.me Cross Site Scripting vulnerability OBB-1478447
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...