Malicious code in bitensor-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-39664

Name of the Vulnerable Software and Affected Versions Rancher Manager versions prior to 2.9.12 Rancher Manager versions prior to 2.10.10 Rancher Manager versions prior to 2.11.6 Rancher Manager versions prior to 2.12.2 Description Rancher Manager is susceptible to phishing attacks targeting SAML...

Malware in @s21games/lsx-cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @s21games/lsx-cli (npm)

The package @s21games/lsx-cli was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1691c42513d45af11b5d79dc36ba379453cd413b244d2e7581b4f7484cca828 Any computer that has this package installed or running should be considered fully...

CVE-2025-9844

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...

Cisco IOS XE Software CLI Argument Injection (cisco-sa-iosxe-arg-inject-EyDDbh4e)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

datav-cli (>=2.11.1, <=2.12.3), govision-cli (>=1.0.2, <=1.0.5) potentially affected by CVE-2025-57348 via node-cube (5.0.0-beta.16)

node-cube NPM version 5.0.0-beta.16 is affected by a known vulnerability. The following packages have a transitive dependency on node-cube and may be impacted: - datav-cli =2.11.1, =1.0.2, =1.0.5 Source cves: CVE-2025-57348 Source advisory: GHSA-8V65-5FW5-23WJ...

graphos-cli (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-57320 via json-schema-editor-visual (2.0.0)

json-schema-editor-visual NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-schema-editor-visual and may be impacted: - graphos-cli =1.0.0, =1.0.1 Source cves: CVE-2025-57320 Source advisory: GHSA-3C3P-XH4F-PFH7...

graphos-cli (>=1.0.0, <=1.0.1), panshi-client (>=0.0.7, <=0.0.8) potentially affected by CVE-2025-57320 via json-schema-editor-visual (>=1.1.1, <=2.0.0)

json-schema-editor-visual NPM version =1.1.1, =1.0.0, =0.0.7, =0.0.8 Source cves: CVE-2025-57320 Source advisory: SNYK:JS-JSONSCHEMAEDITORVISUAL-13110010...

datav-cli (>=2.11.1, <=2.12.3), govision-cli (>=1.0.2, <=1.0.5) potentially affected by CVE-2025-57348 via node-cube (5.0.0-beta.16)

node-cube NPM version 5.0.0-beta.16 is affected by a known vulnerability. The following packages have a transitive dependency on node-cube and may be impacted: - datav-cli =2.11.1, =1.0.2, =1.0.5 Source cves: CVE-2025-57348 Source advisory: OSV:GHSA-8V65-5FW5-23WJ...

graphos-cli (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-57320 via json-schema-editor-visual (2.0.0)

json-schema-editor-visual NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-schema-editor-visual and may be impacted: - graphos-cli =1.0.0, =1.0.1 Source cves: CVE-2025-57320 Source advisory: OSV:GHSA-3C3P-XH4F-PFH7...

CVE-2025-20338

CVE-2025-20338 affects Cisco IOS XE Software CLI. The root cause is insufficient validation of user-supplied arguments passed to specific CLI commands, allowing an authenticated administrator (level 15) to craft CLI input that can execute arbitrary commands as root on the device. According to Cis...

CVE-2025-20338

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments th...

Retail at risk: How one alert uncovered a persistent cyberthreat​​

In the latest edition of our Cyberattack Series, we dive into real-world cases targeting retail organizations. With 60% of retail companies reporting operational disruptions from cyberattacks and 43% experiencing security compromises in the past year, the risks for businesses continue to increase...

cli-pipeline (1.5.114), medikit (0.5.20) potentially affected by CVE-2025-8869 via pip (10.0.0b2)

pip PYPI version 10.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cli-pipeline 1.5.114 - medikit 0.5.20 Source cves: CVE-2025-8869 Source advisory: OSV:GHSA-4XH5-X5GV-QWPH...

CVE-2025-20338: Improper Neutralization of Parameter/Argument Delimiters

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments th...

CVE-2025-20149: Buffer Copy without Checking Size of Input

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to a buffer overflow. An attacker with a...

PT-2025-39295

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A flaw exists in the Command Line Interface CLI of Cisco IOS Software and Cisco IOS XE Software. A local attacker with authentication may be able to cause...

CVE-2025-9844

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...

@flosum/cli (>=0.0.0, <=0.0.5), @flosum/salesforce (>=1.14.10, <=1.17.12-test.18) potentially affected by CVE-2025-9844 via @salesforce/cli (>=2.67.7, <=2.100.4)

@salesforce/cli NPM version =2.67.7, =0.0.0, =1.14.10, =1.17.12-test.18 Source cves: CVE-2025-9844 Source advisory: SNYK:JS-SALESFORCECLI-13011148...