Malicious code in karemz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0210683c3480535deb828dc6e3f758815b2a57ae4a50c37dca6443ad61623aa4 The package karemz was found to contain malicious code. Source: ossf-package-analysis 0ea2cd139758da9c9339894a56f0250a834c2fb01f4b25c9e398daef8c61c99...

MAL-2025-191949 Malicious code in kmz1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764e3cb5b5016e17afcd37b7b263ec2575af32008338ff14e72dd73b1d82bfa1 The package kmz1 was found to contain malicious code. Source: ossf-package-analysis 2a6ae2284037ed233d5af5263950214a55a620b61dde2f0b12669eced34b1957...

Malicious code in kmz1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764e3cb5b5016e17afcd37b7b263ec2575af32008338ff14e72dd73b1d82bfa1 The package kmz1 was found to contain malicious code. Source: ossf-package-analysis 2a6ae2284037ed233d5af5263950214a55a620b61dde2f0b12669eced34b1957...

Malicious code in kkkarem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5221f3ec4ce8c314da6ded901d34c1ef2a0f7822bbec42d09a218885c47b41b2 The package kkkarem was found to contain malicious code. Source: ossf-package-analysis 85f2f16bc0953b5738e5248e16c823f06c7e3e9805d0e85726a59b9d72a4f3...

MAL-2025-191948 Malicious code in kkkarem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5221f3ec4ce8c314da6ded901d34c1ef2a0f7822bbec42d09a218885c47b41b2 The package kkkarem was found to contain malicious code. Source: ossf-package-analysis 85f2f16bc0953b5738e5248e16c823f06c7e3e9805d0e85726a59b9d72a4f3...

CVE-2025-57200

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

CVE-2025-57200

The CVE-2025-57200 issue concerns AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003. Affected component: test_mail function, where an authenticated command injection flaw exists. Under the documented vector, an attacker with authenticated access can craft input to execute arbitrary ...

Red Hat ABRT 安全漏洞

Red Hat ABRT is a suite of tools from Red Hat, Inc. that helps users detect and report application crashes. A security vulnerability exists in Red Hat ABRT that stems from a lack of validation when processing user-supplied mount information, which could cause a local user to execute arbitrary...

CVE-2025-57199

The CVE-2025-57199 entry concerns AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003, where an authenticated command injection vulnerability exists in the NetFailDetectD binary. The Red Hat and NVD records describe an authenticated command injection that lets an attacker execute arbi...

ROS-20251203-03

A vulnerability in the JMX interface of the Apache Cassandra distributed database management system is related to a flaw in the deserialization mechanism. flaws in the deserialization mechanism. Exploitation of the vulnerability could allow an attacker to implement a man-in-the-middle...

CVE-2025-66476

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

UBUNTU-CVE-2025-66476

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

EUVD-2025-200373

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476

Vim for Windows before 9.1.1947 is affected by CVE-2025-66476, an uncontrolled search-path vulnerability that allows launching a malicious executable in the current working directory when Vim resolves external commands (eg. :grep, :!, compiler/make) while using cmd.exe. Affected product: Vim for ...

CVE-2025-66476

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476 Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476 Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66294

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection SSTI vulnerability exists in Grav that allows authenticated attackers with editor permissions to execute arbitrary commands on the server and, under certain conditions, may also be exploited by...

MAL-2025-191668 Malicious code in wfui-dbd-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49a931af71a32dfa7644c29cca564d41bd857fa8cdea4956e0764cd224834ad The package wfui-dbd-react-ui was found to contain malicious code. Source: ghsa-malware...

Malicious code in wfui-dbd-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49a931af71a32dfa7644c29cca564d41bd857fa8cdea4956e0764cd224834ad The package wfui-dbd-react-ui was found to contain malicious code. Source: ghsa-malware...