Malicious code in child-process-achernar-archaeogenetics-hapi (npm)

The package child-process-achernar-archaeogenetics-hapi was found to contain malicious code...

Malicious code in postgres-child-process-package-arcturus (npm)

The package postgres-child-process-package-arcturus was found to contain malicious code...

Malicious code in chalk-spectron-webdriver-child-process-dione (npm)

The package chalk-spectron-webdriver-child-process-dione was found to contain malicious code...

Malicious code in gulp-airbnb-child-process-pulsar (npm)

The package gulp-airbnb-child-process-pulsar was found to contain malicious code...

Malicious code in mocha-filament-child-process-janus (npm)

The package mocha-filament-child-process-janus was found to contain malicious code...

Malicious code in child-process-rigel-soap-comet (npm)

The package child-process-rigel-soap-comet was found to contain malicious code...

MAL-2025-16773 Malicious code in chalk-spectron-webdriver-child-process-dione (npm)

The package chalk-spectron-webdriver-child-process-dione was found to contain malicious code...

MAL-2025-22043 Malicious code in gulp-airbnb-child-process-pulsar (npm)

The package gulp-airbnb-child-process-pulsar was found to contain malicious code...

MAL-2025-19737 Malicious code in equinox-child-process-html-webpack-plugin-frontend (npm)

The package equinox-child-process-html-webpack-plugin-frontend was found to contain malicious code...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

Studio 3T 安全漏洞

Studio 3T is a native cross-platform MongoDB management tool open-sourced by Studio 3T. A security vulnerability exists in Studio 3T 2025.1.0 and earlier versions, which stems from improper handling of a specially crafted payload by the childprocess module and could lead to arbitrary code executi...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

CVE-2025-52385

CVE-2025-52385 affects Studio 3T up to 2025.1.0, with a remote code execution vulnerability via a crafted payload to the child_process module in IntelliShell. The issue arises from improper handling allowing an attacker to run arbitrary code; CVSSv3.1 is reported as 9.8 (CRITICAL) with network at...

PT-2025-33035 · Studio 3T · Studio 3T

Name of the Vulnerable Software and Affected Versions: Studio 3T versions prior to 2025.1.1 Description: An issue allows a remote attacker to execute arbitrary code via a crafted payload to the child process module. Recommendations: Update to version 2025.1.1 or later...

MAL-2025-6829 Malicious code in tensorflowjs (npm)

Package is malicious due to code obfuscation, arbitrary command execution via childprocess.spawn, and suspicious postinstall script. --- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2023-23597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the file:// context. Given ...

GitHub Kanban MCP Server vulnerable to Command Injection

The MCP Server at https://github.com/Sunwood-ai-labs/github-kanban-mcp-server/ is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. Vulnerable tool The MCP Server exposes the tool addcomment which...

CVE-2025-53818 github-kanban-mcp-server Command Injection vulnerability

GitHub Kanban MCP Server is a Model Context Protocol MCP server for managing GitHub issues in Kanban board format and streamlining LLM task management. Version 0.3.0 of the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Serv...