CVE-2025-57199

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

CVE-2025-57198

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

EUVD-2025-201282

This vulnerability fundamentally arises from yzcheng90 X-SpringBoot 6.0's implementation of role-based access control RBAC through dual dependency on frontend menu systems and backend permission tables, without enforcing atomic synchronization between these components. The critical flaw manifests...

Apache HTTP Server < 2.4.66 SSI Vulnerability - Linux

Apache HTTP Server is prone to a Server Side Includes SSI vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Malicious code in self-service-portal-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4de1ac227f5bbfb5b8aead3c1eeccbaeaa77d15ff7575b83b4d7899c380eda The package self-service-portal-prod was found to contain malicious code. Source: ghsa-malware...

GHSA-WVXP-JP4W-W8WG mcp-server-kubernetes has potential security issue in exec_in_pod tool

Summary A security issue exists in the execinpod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string format is provided, it is passed directly to shell interpretation sh -c without input validation, allowing shell...

mcp-server-kubernetes has potential security issue in exec_in_pod tool

Summary A security issue exists in the execinpod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string format is provided, it is passed directly to shell interpretation sh -c without input validation, allowing shell...

Malicious code in elf-stats-twinkling-ribbon-344 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4c9eb38abc668e7c9332e8d230efe3435594c7d8d0b82695d2cfcbdb087a93 The package elf-stats-twinkling-ribbon-344 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192287 Malicious code in elf-stats-twinkling-ribbon-344 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4c9eb38abc668e7c9332e8d230efe3435594c7d8d0b82695d2cfcbdb087a93 The package elf-stats-twinkling-ribbon-344 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-mulled-nightcap-782 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1754b82eccb103258150db62b62845428519c343aa46a0337610f74344af221e The package elf-stats-mulled-nightcap-782 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192274 Malicious code in elf-stats-mulled-nightcap-782 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1754b82eccb103258150db62b62845428519c343aa46a0337610f74344af221e The package elf-stats-mulled-nightcap-782 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192271 Malicious code in @bhyolken/echotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f892e3f11e25c8e53cb0d01901d0e5f6651888b1d6e29d64da4f0b5b85660eb The package @bhyolken/echotest was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-merry-cookiejar-139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3caac305a579d5472a74cce76854b64c309a81144123fd91b346199e6298009b The package elf-stats-merry-cookiejar-139 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-tinsel-candy-605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbef0d18c705f5e2d320ebbffd2ca291c82eeed7bb636c5a582d7388790185 The package elf-stats-tinsel-candy-605 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192270 Malicious code in elf-stats-tinsel-candy-605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbef0d18c705f5e2d320ebbffd2ca291c82eeed7bb636c5a582d7388790185 The package elf-stats-tinsel-candy-605 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192255 Malicious code in elf-stats-festive-workshop-566 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d717c596833851e5babe3f45082a9ebd9cc63e982aadced615ff04fc1a162f61 The package elf-stats-festive-workshop-566 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-festive-workshop-566 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d717c596833851e5babe3f45082a9ebd9cc63e982aadced615ff04fc1a162f61 The package elf-stats-festive-workshop-566 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in unified11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da60b6c513002dadf0ea32c3293c0c1f0e73d8db20f85baf9b207fff1311569 The package unified11 was found to contain malicious code. Source: ghsa-malware 0234999818b5c6447b46c2551778c8daea15a41767afd1270af691c637d8ea9d Any...

MAL-2025-192259 Malicious code in unified11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da60b6c513002dadf0ea32c3293c0c1f0e73d8db20f85baf9b207fff1311569 The package unified11 was found to contain malicious code. Source: ghsa-malware 0234999818b5c6447b46c2551778c8daea15a41767afd1270af691c637d8ea9d Any...

Malicious code in remark-parse10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd5885ca66abe264124578aa99aaeb2907923a26681d5b64e8d6b72cb72696 The package remark-parse10 was found to contain malicious code. Source: ghsa-malware b0d37276c9efb7e85e07384bd19c0625e6672c70443710e145c260516f0ba2f4...