211 matches found
PYSEC-2026-794 Cobbler is vulnerable to code injection
templateapi.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a...
CVE-2026-22390
Improper Control of Generation of Code 'Code Injection' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...
CVE-2005-1632
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...
Malicious code in interior_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f4a0da19a02ce09191d24fc0f6c82a3e21eb0dc7a4d2ec0172ee3d0dcac20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in early_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8312ccd88140f4df3c550d05a635504bdd7245cad8ee52a74e30773e270a605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bored_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d214af96ab428c3a76669e0004c438c1755a0158601f91e5493e2b441478812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-98062
Malicious code in inappropriatecheetahz3n npm...
EUVD-2025-102092
Malicious code in spottycheetahz3n npm...
EUVD-2025-97541
Malicious code in joyouscheetahz3n npm...
MAL-2025-130313 Malicious code in spotty_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a14d4a1e4bc38e13bd3b13759457796cb9a5cf897866d2030f09f94915bf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-125216 Malicious code in bored_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d214af96ab428c3a76669e0004c438c1755a0158601f91e5493e2b441478812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-94906
Malicious code in stuckcheetahz3n npm...
EUVD-2025-88900
Malicious code in scatteredcheetahz3n npm...
EUVD-2025-91815
Malicious code in formalcheetahz3n npm...
EUVD-2025-92107
Malicious code in experimentalcheetahz3n npm...
EUVD-2025-74514
Malicious code in irrelevantcheetahviolet-63 npm...
EUVD-2025-75205
Malicious code in workingcheetah-strongdev npm...
EUVD-2025-76846
Malicious code in firmcheetah-appteadev npm...