CVE-2024-58267

A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens...

CVE-2024-58267: Insufficient Verification of Data Authenticity

A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens...

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via the SAML authentication component. An attacker can obtain authentication tokens belonging to another user by crafting a phishing login URL containing attacker-controlled publicKey and...

Malicious code in bitensor-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47748 Malicious code in bitensor-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-39664

Name of the Vulnerable Software and Affected Versions Rancher Manager versions prior to 2.9.12 Rancher Manager versions prior to 2.10.10 Rancher Manager versions prior to 2.11.6 Rancher Manager versions prior to 2.12.2 Description Rancher Manager is susceptible to phishing attacks targeting SAML...

Malware in @s21games/lsx-cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @s21games/lsx-cli (npm)

The package @s21games/lsx-cli was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1691c42513d45af11b5d79dc36ba379453cd413b244d2e7581b4f7484cca828 Any computer that has this package installed or running should be considered fully...

CVE-2025-9844

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...

Cisco IOS XE Software CLI Argument Injection (cisco-sa-iosxe-arg-inject-EyDDbh4e)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

graphos-cli (>=1.0.0, <=1.0.1), panshi-client (>=0.0.7, <=0.0.8) potentially affected by CVE-2025-57320 via json-schema-editor-visual (>=1.1.1, <=2.0.0)

json-schema-editor-visual NPM version =1.1.1, =1.0.0, =0.0.7, =0.0.8 Source cves: CVE-2025-57320 Source advisory: SNYK:JS-JSONSCHEMAEDITORVISUAL-13110010...

graphos-cli (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-57320 via json-schema-editor-visual (2.0.0)

json-schema-editor-visual NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-schema-editor-visual and may be impacted: - graphos-cli =1.0.0, =1.0.1 Source cves: CVE-2025-57320 Source advisory: OSV:GHSA-3C3P-XH4F-PFH7...

datav-cli (>=2.11.1, <=2.12.3), govision-cli (>=1.0.2, <=1.0.5) potentially affected by CVE-2025-57348 via node-cube (5.0.0-beta.16)

node-cube NPM version 5.0.0-beta.16 is affected by a known vulnerability. The following packages have a transitive dependency on node-cube and may be impacted: - datav-cli =2.11.1, =1.0.2, =1.0.5 Source cves: CVE-2025-57348 Source advisory: GHSA-8V65-5FW5-23WJ...

graphos-cli (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-57320 via json-schema-editor-visual (2.0.0)

json-schema-editor-visual NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-schema-editor-visual and may be impacted: - graphos-cli =1.0.0, =1.0.1 Source cves: CVE-2025-57320 Source advisory: GHSA-3C3P-XH4F-PFH7...

datav-cli (>=2.11.1, <=2.12.3), govision-cli (>=1.0.2, <=1.0.5) potentially affected by CVE-2025-57348 via node-cube (5.0.0-beta.16)

node-cube NPM version 5.0.0-beta.16 is affected by a known vulnerability. The following packages have a transitive dependency on node-cube and may be impacted: - datav-cli =2.11.1, =1.0.2, =1.0.5 Source cves: CVE-2025-57348 Source advisory: OSV:GHSA-8V65-5FW5-23WJ...

CVE-2025-20338

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments th...

CVE-2025-20338

CVE-2025-20338 affects Cisco IOS XE Software CLI. The root cause is insufficient validation of user-supplied arguments passed to specific CLI commands, allowing an authenticated administrator (level 15) to craft CLI input that can execute arbitrary commands as root on the device. According to Cis...

Retail at risk: How one alert uncovered a persistent cyberthreat​​

In the latest edition of our Cyberattack Series, we dive into real-world cases targeting retail organizations. With 60% of retail companies reporting operational disruptions from cyberattacks and 43% experiencing security compromises in the past year, the risks for businesses continue to increase...

cli-pipeline (1.5.114), medikit (0.5.20) potentially affected by CVE-2025-8869 via pip (10.0.0b2)

pip PYPI version 10.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cli-pipeline 1.5.114 - medikit 0.5.20 Source cves: CVE-2025-8869 Source advisory: OSV:GHSA-4XH5-X5GV-QWPH...

CVE-2025-20338: Improper Neutralization of Parameter/Argument Delimiters

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments th...