Malicious code in enclose-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7fc1a375a04989c1b52036b89fefe7fbba475b3fe7ec9917335cfe3a9746bc The package enclose-eslint was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192352 Malicious code in enclose-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7fc1a375a04989c1b52036b89fefe7fbba475b3fe7ec9917335cfe3a9746bc The package enclose-eslint was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in fdir1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba081e2ca3fffe519e73fc13330df7332fbaf118aa8f6c193b43e9b2ce8a5ce The package fdir1 was found to contain malicious code. Source: ossf-package-analysis 8f5aefdb4168145eaa4b092c9e5f4fbd482f9fbd1fc0328b3272f3e2067731e8...

Malicious code in ido-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a541a76e308d33ea53424e63677093bd2347634a5f313f6bff9fd62a4fa83c9 The package ido-sdk-web was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192357 Malicious code in ido-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a541a76e308d33ea53424e63677093bd2347634a5f313f6bff9fd62a4fa83c9 The package ido-sdk-web was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in sharp32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f854d89f15c6f2c295e60f0637ee2cafb7c529411ccde7fd17a6f234d35c1a4 The package sharp32 was found to contain malicious code. Source: ossf-package-analysis 845f95e2b2a4fda74205b37d644e9bacf9b283166313aeb024297e19f24d3d...

MAL-2025-192355 Malicious code in fdir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64821a4790ad9d467b84b11aa1c7038cfa1d2c7307e7db03f049a76104c15850 The package fdir4 was found to contain malicious code. Source: ossf-package-analysis 2864053a37838b568ec7f045df7742f31a81c95af5bf06a5684c8b1361a213b7...

Malicious code in fdir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64821a4790ad9d467b84b11aa1c7038cfa1d2c7307e7db03f049a76104c15850 The package fdir4 was found to contain malicious code. Source: ossf-package-analysis 2864053a37838b568ec7f045df7742f31a81c95af5bf06a5684c8b1361a213b7...

MAL-2025-192358 Malicious code in sharp32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f854d89f15c6f2c295e60f0637ee2cafb7c529411ccde7fd17a6f234d35c1a4 The package sharp32 was found to contain malicious code. Source: ossf-package-analysis 845f95e2b2a4fda74205b37d644e9bacf9b283166313aeb024297e19f24d3d...

Malicious code in fdir2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19307a303580d9399ea5d4c9bee17c0e89d9f81daaab855f99563080ba79630c The package fdir2 was found to contain malicious code. Source: ossf-package-analysis 8999cc376e31073e8a5937b4bed10d25255c312d9b6c888bfad3a30401583b77...

MAL-2025-192354 Malicious code in fdir2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19307a303580d9399ea5d4c9bee17c0e89d9f81daaab855f99563080ba79630c The package fdir2 was found to contain malicious code. Source: ossf-package-analysis 8999cc376e31073e8a5937b4bed10d25255c312d9b6c888bfad3a30401583b77...

MAL-2025-192360 Malicious code in ssf-desktop-api-openfin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367b2689b7d50c48e26747ef1edce3a36165d64fd361ad3fc19f1c52fce204f9 The package ssf-desktop-api-openfin was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-66237

DCIM dcTrack platforms utilize default and hard-coded credentials for access. An attacker could use these credentials to administer the database, escalate privileges on the platform or execute system commands on the host...

CVE-2025-66562

TUUI is a desktop MCP client designed as a tool unitary utility integration. Prior to 1.3.4, a critical Remote Code Execution RCE vulnerability exists in Tuui due to an unsafe Cross-Site Scripting XSS flaw in the Markdown rendering component. Tuui allows the execution of arbitrary JavaScript with...

EUVD-2025-201459

TUUI is a desktop MCP client designed as a tool unitary utility integration. Prior to 1.3.4, a critical Remote Code Execution RCE vulnerability exists in Tuui due to an unsafe Cross-Site Scripting XSS flaw in the Markdown rendering component. Tuui allows the execution of arbitrary JavaScript with...

CVE-2025-64052

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to execute arbitrary system commands...

Exploit for CVE-2025-55182

Research: All versions of CVE-2025-55182 exploit vulnerabiliti...

CVE-2025-58098

CVE-2025-58098 affects Apache HTTP Server 2.4.65 and earlier when Server Side Includes (SSI) is enabled and mod_cgid (not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives, enabling potential command injection. The issue impacts Apache HTTP Server before 2.4.66; remedia...

PT-2025-49254

A reflected Cross Site Scripting XSS vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrary commands via crafted POST request to the /cgi-bin/webconfig?page=upload&action=submit endpoint...

CVE-2025-64054

Fanvil x210 devices running version 2.12.20 are affected by CVE-2025-64054, a reflected XSS vulnerability that can be triggered by a crafted POST to /cgi-bin/webconfig?page=upload&action=submit. The issue can lead to denial of service and potentially arbitrary command execution. Public or vendor-...