Malicious code in cloudflare-agent-starter (npm)

Source: ossf-package-analysis 073c16b7f6f9d6ba8d94458e7efa756a07cfcc78cefbda3ed218097358812980 The OpenSSF Package Analysis project identified 'cloudflare-agent-starter' @ 99.99.99 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in chia-dev-guides (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 346392e0fae6d3a254175cbf00c6b2ebbac781151d1eb9fe24079457e807b317 The OpenSSF Package Analysis project identified 'chia-dev-guides' @ 1.1.3 npm as malicious. It is considered malicious because:...

Malicious code in chain00x_rce (npm)

Source: ossf-package-analysis 3f3656f34947ab9c7e747961055e3697ca5d51e275e42ca7fae5ab01f1c2e7ef The OpenSSF Package Analysis project identified 'chain00xrce' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. -...

Malicious code in castorama.pl (npm)

Source: ossf-package-analysis 730bed67861cb1d30e187eb40b957257e8395b86e8a9e255005ba3b808369878 The OpenSSF Package Analysis project identified 'castorama.pl' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. ...

Malicious code in careform (npm)

Source: ossf-package-analysis d7248630d858215437792791bab0fa4a0e67e7a614e29fe427c829e371c5a5bc The OpenSSF Package Analysis project identified 'careform' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - Th...

Malicious code in 2nestjs (npm)

Source: amazon-inspector c9471c1fdd6ae99da48e44b8588f9e36814ce2859f2d25641b06cc53cf42174d The package's postinstall hook executes index.js, which enumerates process.env, filters keys matching /^SECRET|API|TOKEN|KEY/, JSON-serializes the matched values, and writes them over a raw TCP socket to the...

CVE-2026-62928

XING CPTrans-ME-X contains an OS Command Injection CWE-78. Unauthenticated OS command may be injected...

EUVD-2026-70916

XING CPTrans-ME-X contains an OS Command Injection CWE-78. Unauthenticated OS command may be injected...

CVE-2026-62928

XING CPTrans-ME-X , a rack accessory product, contains an OS Command Injection vulnerability (CWE-78) that allows unauthenticated attackers to inject arbitrary OS commands. The flaw carries a CVSS 9.8 CRITICAL score (v3.0) with high impact on confidentiality, integrity, and availability, indicati...

CVE-2026-62928

XING CPTrans-ME-X contains an OS Command Injection CWE-78. Unauthenticated OS command may be injected...

Malicious code in 2nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9471c1fdd6ae99da48e44b8588f9e36814ce2859f2d25641b06cc53cf42174d The package's postinstall hook executes index.js, which enumerates process.env, filters keys matching /^SECRET|API|TOKEN|KEY/, JSON-serializes the...

EUVD-2026-70850

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerabili...

EUVD-2026-70814

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharacters into client names to execute arbitrary commands as the uMemWatch process user through unquoted redirection targets in system calls...

CVE-2026-67402

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerabili...

EUVD-2026-71742

Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the...

ROS-20260904-73-0014

The vulnerability in freerdp3 is related to the implementation or modification of arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

PT-2026-85409

Name of the Vulnerable Software and Affected Versions XING CPTrans-ME-X affected versions not specified Description XING CPTrans-ME-X contains an OS Command Injection flaw, which allows an unauthenticated user to inject and execute arbitrary operating system commands. Recommendations At the momen...

CVE-2026-75925: Improper Neutralization of CRLF Sequences

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, without line-ending sequences being...

CVE-2026-16826: Improper Neutralization of Special Elements used in an OS Command

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-85674: Improper Control of Generation of Code

aider aider-chat automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd executed at startup or lint-cmd executed on the first file edit, which aider runs through a shell subprocess with shell=True witho...