1114259 matches found
Malicious code in uncrypt (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61fc5c3033efaa35a8eae7781fa0fc4b300f753c5b0d56e07adcc0557e9b648f The package presents itself as a trivial Python XOR/hex helper, but uncrypt/init.py executes runsecuritylauncher at module top level, which...
NPM: Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props
NPM: Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props vulnerability discovered by ? in WordPress Npm nuxt versions = 3.4.0, 3.21.10...
CVE-2026-71320 Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props
Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /nuxtisland/ props into a dynamic component when vue.runtimeCompiler: true is enabled, causing template execution in the Nitro process. This issue is fixe...
CVE-2026-71320 Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props
Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /nuxtisland/ props into a dynamic component when vue.runtimeCompiler: true is enabled, causing template execution in the Nitro process. This issue is fixe...
CVE-2026-71319 Nuxt.js Unauthenticated WebSocket RPC Call Leading to Remote Code Execution
Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools development mode only exposes a bidirectional RPC channel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected versions the channel has no authentication: any client that can reach the...
EUVD-2026-53648
Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools development mode only exposes a bidirectional RPC channel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected versions the channel has no authentication: any client that can reach the...
CVE-2026-71319
Nuxt DevTools prior to version 3.3.1 exposes an unauthenticated bidirectional RPC channel over the Vite HMR WebSocket (ws://:/, subprotocol vite-hmr). The channel, via plugin nuxt:devtools:rpc, allows calling RPC methods without token/handshake/origin checks; updateOptions(), clearOptions(), and ...
CVE-2026-71319 Nuxt.js Unauthenticated WebSocket RPC Call Leading to Remote Code Execution
Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools development mode only exposes a bidirectional RPC channel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected versions the channel has no authentication: any client that can reach the...
Exploit for Interpretation Conflict in Wordpress
wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Ba...
EUVD-2026-53619
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...
MINI-FG38-Q79H-375X
Bulletin has no description...
MINI-W4FH-3C4C-44H2
Bulletin has no description...
MINI-864M-C285-XWVX
Bulletin has no description...
MINI-C4JJ-R9X8-38RP
Bulletin has no description...
GHSA-22JQ-VG5J-6VGG vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, langfuse, opensearch-dashboards, sqlpad, npm, lerna, code-server, prism, pulumi, renovate...
CVE-2026-69192 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, langfuse, opensearch-dashboards, sqlpad, npm, lerna, code-server, prism, pulumi, renovate...
CVE-2026-54272 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, langfuse, opensearch-dashboards, sqlpad, npm, lerna, code-server, prism, pulumi, renovate...
GHSA-GF76-8FVR-H9HJ vulnerabilities
Vulnerabilities for packages: chromium...