58996 matches found
ROS-20260907-73-0507
The vulnerability in awscli2 is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to execute arbitrary commands on the operating system...
ROS-20260907-73-0506
The vulnerability in awscli is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to execute arbitrary commands on the operating system...
ROS-20260907-73-0023
The vulnerability in the buildkit is related to the implementation or modification of arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
PT-2026-86793
LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph title parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. Attackers can inject DEF and LINE arguments to read RRD files from unauthorized...
PT-2026-86822
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit...
ThreatSonar Anti-Ransomware Download Arbitrary Command Execution
The vulnerability of the ThreatSonar Anti-Ransomware tool lies in its ability to download files of a malicious nature without limitation. Exploiting this vulnerability allows a remote attacker to execute arbitrary system commands by downloading specially created files...
Malicious code in eixp4ressz (npm)
Source: amazon-inspector f9ba71706cf48badd366c9b3be4d6645698df1943a258c9f768f2b63c1b9ce7f The package eixp4ressz was found to contain malicious code. Source: ossf-package-analysis 442c0375b7298883cd4b86712be426409bc6a8025a3d1d0f5fae992efb2633f6 The OpenSSF Package Analysis project identified...
Malicious code in ds-header (npm)
Source: ossf-package-analysis 51f8c8b4f365efe9e19ae3c1f9dc70779556603342c121e189acf9e26fb44edb The OpenSSF Package Analysis project identified 'ds-header' @ 9999.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. ...
Malicious code in draconianspeed (npm)
Source: ossf-package-analysis b1212e40bb57fce7672f50431153645b13624cc1e2061b44c0b91fec275e7853 The OpenSSF Package Analysis project identified 'draconianspeed' @ 5.0.0 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious...
Malicious code in dpais-chat-template-pwa (npm)
The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 4d39545ec9be8c0beabaaf1f508b0f468a884898b3fb8b8ae6d73b5cb62c54fc The OpenSSF Package Analysis project identified 'dpais-chat-template-pwa' @ 11.2.1 npm as malicious. It is considered malicious...
Malicious code in donuts.node-build (npm)
Source: ossf-package-analysis 6b8d6fee5827de9688cc9b83812dc32e54e33531a0bd2fd179dc3e2935564dc7 The OpenSSF Package Analysis project identified 'donuts.node-build' @ 99.99.104 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...
Malicious code in dionisio (npm)
The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis eafd017c48863d43324ba67c2aa3770cc03881cca223fccfc91da0e8af92c1fa The OpenSSF Package Analysis project identified 'dionisio' @ 2.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in didi-store (npm)
Source: amazon-inspector ec40734e930981063202411bf5a56c99bc1c947a0e0f630353614505610bca37 The package didi-store was found to contain malicious code. Source: ossf-package-analysis b6865235b7969b9255820b0f2ec34bebf1d7570865f85290865b28d0de85bf75 The OpenSSF Package Analysis project identified...
Malicious code in dep-poc (npm)
Source: ossf-package-analysis 880d5ea6c43eb50d284249180eca08fc64f4f7efa0a1e1abaaf234acfce4b6d6 The OpenSSF Package Analysis project identified 'dep-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The...
Malicious code in delta0231 (npm)
Source: ossf-package-analysis 7df399fa1580fb8e64d7cd2481b0212f607aa8146a1b904b83a7af05ebb8031b The OpenSSF Package Analysis project identified 'delta0231' @ 100.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. -...
Malicious code in ddataflow (npm)
Source: ossf-package-analysis 7e3628188472d3921b31929497ffb10a64fe2632cd81d96c68d5eafa7b7cf18d The OpenSSF Package Analysis project identified 'ddataflow' @ 3.1.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - T...
Malicious code in dds-js (npm)
The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis d47ebdc1891b1fd02986098c63e73de75cf01ce8c67fc24f74ec39c86a04e866 The OpenSSF Package Analysis project identified 'dds-js' @ 2.4.0 npm as malicious. It is considered malicious because: - The...
Malicious code in dc-testing (npm)
Source: ossf-package-analysis 5534b8254822e7e5f6e4ee2e6f748422783f8a2aebac5f16fca13c06af524468 The OpenSSF Package Analysis project identified 'dc-testing' @ 99.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. -...
Malicious code in data-type-public (npm)
Source: ossf-package-analysis 90c26075e74ebc9cae6a492f997974105a4951be23a89236c7e84a0a9e169933 The OpenSSF Package Analysis project identified 'data-type-public' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...
