803 matches found
CVE-2025-54994 @akoskm/create-mcp-server-stdio has Command Injection in MCP Server due to unsafe `exec` API
@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...
Malicious code in child-process-query-sagitta-chakra-ui (npm)
The package child-process-query-sagitta-chakra-ui was found to contain malicious code...
Malicious code in asteroid-quito-child-process-rest (npm)
The package asteroid-quito-child-process-rest was found to contain malicious code...
MAL-2025-43785 Malicious code in child-process-query-sagitta-chakra-ui (npm)
The package child-process-query-sagitta-chakra-ui was found to contain malicious code...
MAL-2025-43521 Malicious code in asteroid-quito-child-process-rest (npm)
The package asteroid-quito-child-process-rest was found to contain malicious code...
CVE-2025-56803
CVE-2025-56803 affects Figma Desktop for Windows v125.6.5. The vulnerability is a command injection in the local plugin loader: if a plugin manifest.json includes a string in the build field, it is passed to Node.js child_process.exec without validation, enabling arbitrary OS command execution wh...
Exploit for CVE-2025-56803
CVE-2025-56803 Command Injection Vulnerability via Plugin...
Linux Distros Unpatched Vulnerability : CVE-2019-12210
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debugfile, that file descriptor is not closed when a new process is...
CVE-2025-52385
An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...
Malicious code in yonder-bunyan-commitlint-config-angular-child-process (npm)
The package yonder-bunyan-commitlint-config-angular-child-process was found to contain malicious code...
Malicious code in mutation-child-process-repository-xerxes (npm)
The package mutation-child-process-repository-xerxes was found to contain malicious code...
Malicious code in async-apollo-standard-child-process (npm)
The package async-apollo-standard-child-process was found to contain malicious code...
Malicious code in equinox-child-process-html-webpack-plugin-frontend (npm)
The package equinox-child-process-html-webpack-plugin-frontend was found to contain malicious code...
Malicious code in child-process-asthenosphere-callisto-eventhoriz (npm)
The package child-process-asthenosphere-callisto-eventhoriz was found to contain malicious code...
Malicious code in cypress-loop-child-process-hyperion (npm)
The package cypress-loop-child-process-hyperion was found to contain malicious code...
Malicious code in xenos-prompts-kaus-child-process (npm)
The package xenos-prompts-kaus-child-process was found to contain malicious code...
MAL-2025-29548 Malicious code in postgres-child-process-package-arcturus (npm)
The package postgres-child-process-package-arcturus was found to contain malicious code...
MAL-2025-14509 Malicious code in andromeda-child-process-local-firebase (npm)
The package andromeda-child-process-local-firebase was found to contain malicious code...