53219 matches found
MAL-2026-202 Malicious code in wac-relay-runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6742f4abdd6851c0f1a4f003f84ac7dca306f8b29a0bf39ad8e41b12a9680d32 The package wac-relay-runtime was found to contain malicious code. Source: ghsa-malware...
Malicious code in mui7icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a78d5005068e75f9e5cc23616c1aa5a52bded7585e24cac270cdc0623c54de8 The package mui7icons was found to contain malicious code. Source: ghsa-malware bb725c3a171c7afa85beb301d5067750d7d43a1cd8f3dc836c4296dda3cd283b Any...
MAL-2026-195 Malicious code in mui7icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a78d5005068e75f9e5cc23616c1aa5a52bded7585e24cac270cdc0623c54de8 The package mui7icons was found to contain malicious code. Source: ghsa-malware bb725c3a171c7afa85beb301d5067750d7d43a1cd8f3dc836c4296dda3cd283b Any...
Malicious code in vet-bones (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ce97e3af4cf9c82b0a51f4b693273ac59c6b1357b445b5613fbdcf7edec9a9 The package vet-bones was found to contain malicious code. Source: ghsa-malware 963e426141db06e18a04d497aed8ab05c8c6acfc76e6570d7c4a0bd2d81d7658 Any...
Malicious code in wac-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0642cdcd4abbaddae08f167b77852150ee23b0b9b363fd7495df86b998a43533 The package wac-react was found to contain malicious code. Source: ghsa-malware 0ccbbe4984cb82022ab6dafda5531ee164a8b7554a4796e3936432f0e17bc8d6 Any...
Malicious code in wac-react-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3574245c1ec6c0d46b337b9600a38046ef129489605e5e108fcaaed753d50c9 The package wac-react-dom was found to contain malicious code. Source: ghsa-malware 483203b2478e5e472201a6f6d8efef0353ca7fb2ccf429996cc59e2574b2e497...
MAL-2026-201 Malicious code in wac-react-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3574245c1ec6c0d46b337b9600a38046ef129489605e5e108fcaaed753d50c9 The package wac-react-dom was found to contain malicious code. Source: ghsa-malware 483203b2478e5e472201a6f6d8efef0353ca7fb2ccf429996cc59e2574b2e497...
Malicious code in resto_ui_components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3404a7cf3642d3e49538ae488a44a564dc5dd94102302ab33814b62e4427a The package restouicomponents was found to contain malicious code. Source: ghsa-malware...
Malicious code in shopping-cart-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35497d79077eb5f8f79659d420f79568f9fcf905b9ab2f2cceb043eb6eba574 The package shopping-cart-service was found to contain malicious code. Source: ghsa-malware...
CVE-2026-22601 OpenProject is Vulnerable to Code Execution in E-Mail function
OpenProject is an open-source, web-based project management software. For OpenProject version 16.6.1 and below, a registered administrator can execute arbitrary command by configuring sendmail binary path and sending a test email. This issue has been patched in version 16.6.2...
PT-2026-2183
Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.8.2-rc2 Description LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.2-rc2, the MCP stdio transport does not validate commands, allowing authenticated users to execute shell commands as...
CVE-2025-69542
A Command Injection Vulnerability has been discovered in the DHCP daemon service of D-Link DIR895LA1 v102b07. The vulnerability exists in the lease renewal processing logic where the DHCP hostname parameter is directly concatenated into a system command without proper sanitization. When a DHCP...
CVE-2005-1818
Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors...
CVE-2005-1629
SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter...
CVE-2005-1149
SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...
CVE-2005-1734
Multiple SQL injection vulnerabilities in PROMS before 0.11 allow remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2005-1585
Multiple SQL injection vulnerabilities in Quick.Forum 2.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 iCategory or 2 page parameter to index.php, or 3 iCategory parameter in the query string to the forum directory...
CVE-2005-1972
Multiple SQL injection vulnerabilities in InteractivePHP FusionBB .11 Beta and earlier allow remote attackers to execute arbitrary SQL commands via 1 the username, which is not properly handled by the insertUser function, or 2 the bbsessionid value in a cookie...