925 matches found
EUVD-2025-112695
Malicious code in husky-fork-child-process-flare npm...
EUVD-2025-115349
Malicious code in child-process-uninstall-mui-dactyl npm...
EUVD-2025-113562
Malicious code in fomalhaut-pyxis-child-process-terser npm...
EUVD-2025-115351
Malicious code in child-process-socketio-envconfig-umbriel npm...
EUVD-2025-124008
Malicious code in orbit-thuban-child-process-writable npm...
EUVD-2025-122335
Malicious code in sagitta-child-process-zenith-fork npm...
EUVD-2025-122291
Malicious code in sagitta-xml-child-process-loopback npm...
EUVD-2025-115354
Malicious code in child-process-miranda-enif-nightwatch npm...
MAL-2025-148874 Malicious code in uglify-js-hexo-zenobia-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934967d7940b8009db69a6f57f4813c107293a76d651412f11a90960aed262c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115358
Malicious code in child-process-init-winston-frontend npm...
MAL-2025-142856 Malicious code in geckodriver-betelgeuse-child-process-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31abebe698d8af8cbc8ebce961177393b1d102428f71683195d47280d39b7ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122778
Malicious code in regulus-child-process-sedna-terser-webpack-plugin npm...
MAL-2025-144523 Malicious code in loglevel-xenos-child-process-zenith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89afd7046dc02e65e205937635f26c7474c3f5c9ba7e19863cb1fcd4455e0cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Mozilla Firefox Code Execution Vulnerability (CNVD-2025-26886)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a code execution vulnerability that is caused by the use of a WebGPU internal release triggered by an infected child process. An attacker could exploit the vulnerability to...
CVE-2025-12380
Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2...
CVE-2025-12380 Use-after-free in WebGPU internals triggered from a compromised child process
Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a code execution vulnerability that is caused by the use of a WebGPU internal release triggered by an infected child process. An attacker could exploit the vulnerability to...
Security Vulnerabilities fixed in Firefox 144.0.2 — Mozilla
Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox...
Figma Developer MCP < 0.6.3 RCE (GHSA-gxw4-4fc5-9gr5)
The remote host has a version of figma-developer-mcp prior to 0.6.3. A command injection vulnerability exists in the figma-developer-mcp MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary...