Malicious code in blitz-rollup-scripts-cli (npm)

The package blitz-rollup-scripts-cli was found to contain malicious code...

Malicious code in cli-colors-enceladus-izar (npm)

The package cli-colors-enceladus-izar was found to contain malicious code...

Malicious code in cli-bulma-elara-dynamo (npm)

The package cli-bulma-elara-dynamo was found to contain malicious code...

CVE-2025-48395: Improper Limitation of a Pathname to a Restricted Directory

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version of NMC G2 which is available on the Eaton download center...

io.undertow:undertow-http2-test-suite (1.3.0.cr1), io.undertow:undertow-servlet (1.3.0.cr1) +49 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.3.0.cr1)

io.undertow:undertow-core MAVEN version 1.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr1 - io.undertow:undertow-servlet 1.3.0.cr1 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta8), io.undertow:undertow-servlet (1.3.0.beta8) +20 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.3.0.beta8)

io.undertow:undertow-core MAVEN version 1.3.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta8 - io.undertow:undertow-servlet 1.3.0.beta8 -...

[SECURITY] Fedora 41 Update: docker-buildx-0.27.0-1.fc41

Docker CLI plugin for extended build capabilities with BuildKit...

Linux Distros Unpatched Vulnerability : CVE-2025-49005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In Next.js App Router from 15.3.0 to before 15.3.3 and Vercel CLI from 41.4.1 to 42.2.0, ...

DomiExploit-Cyber-Scanner

It is an offensive tool for penetration testing. The DomiExploit...

Linux Distros Unpatched Vulnerability : CVE-2024-9773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starti...

MAL-2025-42025 Malicious code in mongose-cli (npm)

The package mongose-cli was found to contain malicious code...

MAL-2025-42020 Malicious code in lovable-cli (npm)

The package lovable-cli was found to contain malicious code...

Malicious code in lovable-cli (npm)

The package lovable-cli was found to contain malicious code...

Malicious code in mongose-cli (npm)

The package mongose-cli was found to contain malicious code...

Malicious code in anypoint-cli-api-project (npm)

The package anypoint-cli-api-project was found to contain malicious code...

Malicious code in eslint-validation-cli (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-20295 Cisco UCS Manager Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file on the file system of the underlying operating system of an affected device, including system files. This vulnerabili...

CVE-2025-20295: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file on the file system of the underlying operating system of an affected device, including system files. This...

CVE-2025-20294: Improper Neutralization of Special Elements used in an OS Command

Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges to perform command injection attacks on an affected system and elevate privileges to root. These vulnerabilities are...

CVE-2025-20292: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. This...