726 matches found
interactive-git-checkout has a Command Injection vulnerability
The npm package interactive-git-checkout is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via npm install -g interactive-git-checkout. Resources: Project'...
CVE-2025-54994
@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...
GHSA-3CH2-JXXC-V4XF @akoskm/create-mcp-server-stdio is vulnerable to MCP Server Command Injection through `exec` API
Command Injection in MCP Server The MCP Server at https://github.com/akoskm/create-mcp-server-stdio is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. Vulnerable tool The MCP Server exposes the to...
CVE-2025-54994 @akoskm/create-mcp-server-stdio has Command Injection in MCP Server due to unsafe `exec` API
@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...
CVE-2025-54994 @akoskm/create-mcp-server-stdio has Command Injection in MCP Server due to unsafe `exec` API
@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...
MAL-2025-43785 Malicious code in child-process-query-sagitta-chakra-ui (npm)
The package child-process-query-sagitta-chakra-ui was found to contain malicious code...
Malicious code in child-process-query-sagitta-chakra-ui (npm)
The package child-process-query-sagitta-chakra-ui was found to contain malicious code...
Malicious code in asteroid-quito-child-process-rest (npm)
The package asteroid-quito-child-process-rest was found to contain malicious code...
MAL-2025-43521 Malicious code in asteroid-quito-child-process-rest (npm)
The package asteroid-quito-child-process-rest was found to contain malicious code...
CVE-2025-56803
CVE-2025-56803 affects Figma Desktop for Windows v125.6.5. The vulnerability is a command injection in the local plugin loader: if a plugin manifest.json includes a string in the build field, it is passed to Node.js child_process.exec without validation, enabling arbitrary OS command execution wh...
Exploit for CVE-2025-56803
CVE-2025-56803 Command Injection Vulnerability via Plugin...
Linux Distros Unpatched Vulnerability : CVE-2019-12210
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debugfile, that file descriptor is not closed when a new process is...
CVE-2025-52385
An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...
Malicious code in gulp-airbnb-child-process-pulsar (npm)
The package gulp-airbnb-child-process-pulsar was found to contain malicious code...
MAL-2025-40579 Malicious code in yonder-bunyan-commitlint-config-angular-child-process (npm)
The package yonder-bunyan-commitlint-config-angular-child-process was found to contain malicious code...
MAL-2025-29548 Malicious code in postgres-child-process-package-arcturus (npm)
The package postgres-child-process-package-arcturus was found to contain malicious code...
MAL-2025-23742 Malicious code in jest-miranda-child-process-deneb (npm)
The package jest-miranda-child-process-deneb was found to contain malicious code...
MAL-2025-16979 Malicious code in child-process-achernar-archaeogenetics-hapi (npm)
The package child-process-achernar-archaeogenetics-hapi was found to contain malicious code...