925 matches found
CVE-2025-54994
@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...
CVE-2025-54994: Improper Neutralization of Special Elements used in an OS Command
@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...
Malicious code in asteroid-quito-child-process-rest (npm)
The package asteroid-quito-child-process-rest was found to contain malicious code...
Malicious code in child-process-query-sagitta-chakra-ui (npm)
The package child-process-query-sagitta-chakra-ui was found to contain malicious code...
MAL-2025-43521 Malicious code in asteroid-quito-child-process-rest (npm)
The package asteroid-quito-child-process-rest was found to contain malicious code...
MAL-2025-43785 Malicious code in child-process-query-sagitta-chakra-ui (npm)
The package child-process-query-sagitta-chakra-ui was found to contain malicious code...
CVE-2025-56803
Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. The root cause is that the application passes the build field from a plugin's manifest.json file directly to child_process.exec() without proper sanitization or validation. This allows...
Exploit for CVE-2025-56803
CVE-2025-56803 Command Injection Vulnerability via Plugin...
Linux Distros Unpatched Vulnerability : CVE-2019-12210
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debugfile, that file descriptor is not closed when a new process is...
CVE-2025-52385
An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...
Malicious code in async-apollo-standard-child-process (npm)
The package async-apollo-standard-child-process was found to contain malicious code...
Malicious code in chalk-spectron-webdriver-child-process-dione (npm)
The package chalk-spectron-webdriver-child-process-dione was found to contain malicious code...
Malicious code in child-process-asthenosphere-callisto-eventhoriz (npm)
The package child-process-asthenosphere-callisto-eventhoriz was found to contain malicious code...
Malicious code in child-process-rigel-soap-comet (npm)
The package child-process-rigel-soap-comet was found to contain malicious code...
Malicious code in cypress-loop-child-process-hyperion (npm)
The package cypress-loop-child-process-hyperion was found to contain malicious code...
Malicious code in equinox-child-process-html-webpack-plugin-frontend (npm)
The package equinox-child-process-html-webpack-plugin-frontend was found to contain malicious code...
Malicious code in gulp-airbnb-child-process-pulsar (npm)
The package gulp-airbnb-child-process-pulsar was found to contain malicious code...
Malicious code in jest-miranda-child-process-deneb (npm)
The package jest-miranda-child-process-deneb was found to contain malicious code...