15943 matches found
MAL-2025-192618 Malicious code in adk-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa79ad3f20525e947d85a4aef9c78e0c79c2377ac01d03bbb8153dc256efe7c The package adk-cli was found to contain malicious code. Source: ghsa-malware 201d1358b161ed151cde448595832eccef539099208ee82dec74ea4fa1ddb8a8 Any...
Malicious code in adk-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa79ad3f20525e947d85a4aef9c78e0c79c2377ac01d03bbb8153dc256efe7c The package adk-cli was found to contain malicious code. Source: ghsa-malware 201d1358b161ed151cde448595832eccef539099208ee82dec74ea4fa1ddb8a8 Any...
EUVD-2025-204502
Malicious code in adk-cli npm...
CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-20
CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-20. A patched version of the package is available...
@tinacms/app (>=0.0.0-0b7103c-20251216023146, <=2.3.15), @tinacms/cli (>=0.0.0-0b7103c-20251216023146, <=2.0.3) +4 more potentially affected by CVE-2025-68278 via @tinacms/graphql (>=2.0.0, <=2.0.2)
@tinacms/graphql NPM version =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =3.1.0 Source cves: CVE-2025-68278 Source advisory: GHSA-529F-9QWM-9628...
@tinacms/app (>=2.3.12, <=2.3.15), @tinacms/cli (>=2.0.0, <=2.0.3) +1 more potentially affected by CVE-2025-68278 via tinacms (>=3.0.0, <=3.1.0)
tinacms NPM version =3.0.0, =2.3.12, =2.0.0, =0.1.12, =0.1.15 Source cves: CVE-2025-68278 Source advisory: GHSA-529F-9QWM-9628...
EUVD-2025-204304
tinacms is vulnerable to arbitrary code execution...
@cloudcommerce/storefront (>=0.10.0, <=0.11.0), @gspenst/next (>=0.0.1, <=0.1.2) +6 more potentially affected by CVE-2025-68278 via @tinacms/cli (>=0.60.28, <=1.12.6)
@tinacms/cli NPM version =0.60.28, =0.10.0, =0.0.1, =0.1.0, =0.0.2, =0.0.3, =0.0.1, =0.1.3 - next-tina-github-starter 0.1.0 - ramidus 1.2.1 Source cves: CVE-2025-68278 Source advisory: MEND:CVE-2025-68278...
CVE-2025-68459
RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service...
CVE-2025-68459
RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service...
EUVD-2025-204038
RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service...
Exploit for CVE-2025-61260
OpenAI Codex CLI Vuln...
CVE-2025-68459: Improper Neutralization of Special Elements used in an OS Command
RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service...
@storybook/cli (>=10.2.0-alpha.0, <=10.2.0-alpha.6), @storybook/codemod (>=10.2.0-alpha.0, <=10.2.0-alpha.6) +2 more potentially affected by CVE-2025-68429 via storybook (>=10.2.0-alpha.0, <=10.2.0-alpha.6)
storybook NPM version =10.2.0-alpha.0, =10.2.0-alpha.0, =10.2.0-alpha.0, =10.2.0-alpha.0, =10.2.0-alpha.0, =10.2.0-alpha.6 Source cves: CVE-2025-68429 Source advisory: SNYK:JS-STORYBOOK-14534871...
freckles (>=0.9.1, <=1.0.0), freckles-adapter-nsbl (>=0.9.0, <=1.0.0) +3 more potentially affected by CVE-2025-68142 via pymdown-extensions (6.0.0)
pymdown-extensions PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - freckles =0.9.1, =0.9.0, =0.9.0, =0.9.0, =1.0.0 Source cves: CVE-2025-68142 Source advisory: OSV:GHSA-R6H4-MM7H-8PMQ...
Exploit for Deserialization of Untrusted Data in Facebook React
🔍 Next.js RCE Scanner - CVE-2025-55182 & CVE-2025-66478...
@arikaim/cli (>=0.0.3, <=0.1.3), @arikaim/server (>=1.0.1, <=1.0.6) +26 more potentially affected by CVE-2025-67898 via mjml (>=5.0.0-alpha.1, <=5.0.0-alpha.6)
mjml NPM version =5.0.0-alpha.1, =0.0.3, =1.0.1, =11.1.0, =2.1.0, =0.2.0, =1.1.2-beta.9, =1.1.2-beta.9, =0.1.0, =1.1.2-beta.9, =1.1.2-beta.9, =0.1.0, =1.1.2-beta.9, =1.7.0-beta.3 and more Source cves: CVE-2025-67898 Source advisory: OSV:GHSA-45H5-66JX-R2WF...
Improper Restriction Of Command Execution
org.jenkins-ci.plugins, azure-cli is vulnerable to improper restriction of command execution. The vulnerability is due to insufficient validation of executed commands, which allows an attacker with Item/Configure permission to execute arbitrary shell commands on the Jenkins controller...
Denial Of Service (DoS)
org.jenkins-ci.main, jenkins-core is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling and closure of corrupted HTTP-based CLI connection streams, which allows an unauthenticated attacker to trigger a denial of service by sending malformed or corrupted connection...