Malicious code in elf-stats-snowdusted-cookiejar-250 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2480ce9c2a166238de101bac9cb648e0ba2a3b60bb4c0adef110d95d1a701797 The package elf-stats-snowdusted-cookiejar-250 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192370 Malicious code in elf-stats-snowdusted-cookiejar-250 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2480ce9c2a166238de101bac9cb648e0ba2a3b60bb4c0adef110d95d1a701797 The package elf-stats-snowdusted-cookiejar-250 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-caroling-wishlist-626 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff553f8337da6d0bc56a29ed6adb190407c29586610823cb3336ed18c35aa2e The package elf-stats-caroling-wishlist-626 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192369 Malicious code in elf-stats-caroling-wishlist-626 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff553f8337da6d0bc56a29ed6adb190407c29586610823cb3336ed18c35aa2e The package elf-stats-caroling-wishlist-626 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192303 Malicious code in elf-stats-ginger-wreath-646 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0736ed9611847ba4c5416cd0bd8ba33bae114769eec8947e7d58c85c3ce100c1 The package elf-stats-ginger-wreath-646 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-ginger-wreath-646 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0736ed9611847ba4c5416cd0bd8ba33bae114769eec8947e7d58c85c3ce100c1 The package elf-stats-ginger-wreath-646 was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-65842

The Aquarius HelperTool 1.0.003 privileged XPC service on macOS contains multiple flaws that allow local privilege escalation. The service accepts XPC connections from any local process without validating the client's identity, and its authorization logic incorrectly calls AuthorizationCopyRights...

CVE-2025-57199

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

CVE-2025-57198

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

EUVD-2025-201282

This vulnerability fundamentally arises from yzcheng90 X-SpringBoot 6.0's implementation of role-based access control RBAC through dual dependency on frontend menu systems and backend permission tables, without enforcing atomic synchronization between these components. The critical flaw manifests...

Apache HTTP Server < 2.4.66 SSI Vulnerability - Linux

Apache HTTP Server is prone to a Server Side Includes SSI vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Malicious code in self-service-portal-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4de1ac227f5bbfb5b8aead3c1eeccbaeaa77d15ff7575b83b4d7899c380eda The package self-service-portal-prod was found to contain malicious code. Source: ghsa-malware...

mcp-server-kubernetes has potential security issue in exec_in_pod tool

Summary A security issue exists in the execinpod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string format is provided, it is passed directly to shell interpretation sh -c without input validation, allowing shell...

GHSA-WVXP-JP4W-W8WG mcp-server-kubernetes has potential security issue in exec_in_pod tool

Summary A security issue exists in the execinpod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string format is provided, it is passed directly to shell interpretation sh -c without input validation, allowing shell...

Malicious code in elf-stats-twinkling-ribbon-344 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4c9eb38abc668e7c9332e8d230efe3435594c7d8d0b82695d2cfcbdb087a93 The package elf-stats-twinkling-ribbon-344 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192287 Malicious code in elf-stats-twinkling-ribbon-344 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4c9eb38abc668e7c9332e8d230efe3435594c7d8d0b82695d2cfcbdb087a93 The package elf-stats-twinkling-ribbon-344 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-mulled-nightcap-782 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1754b82eccb103258150db62b62845428519c343aa46a0337610f74344af221e The package elf-stats-mulled-nightcap-782 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192274 Malicious code in elf-stats-mulled-nightcap-782 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1754b82eccb103258150db62b62845428519c343aa46a0337610f74344af221e The package elf-stats-mulled-nightcap-782 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192271 Malicious code in @bhyolken/echotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f892e3f11e25c8e53cb0d01901d0e5f6651888b1d6e29d64da4f0b5b85660eb The package @bhyolken/echotest was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-merry-cookiejar-139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3caac305a579d5472a74cce76854b64c309a81144123fd91b346199e6298009b The package elf-stats-merry-cookiejar-139 was found to contain malicious code. Source: ossf-package-analysis...