Malicious code in @mesh-components/customthemeprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b2e29319a8cb96867858b20a43a684624167dc62c186de47de7e7e7e8c8a2a The package @mesh-components/customthemeprovider was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2023 Malicious code in @mesh-components/customthemeprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b2e29319a8cb96867858b20a43a684624167dc62c186de47de7e7e7e8c8a2a The package @mesh-components/customthemeprovider was found to contain malicious code. Source: ossf-package-analysis...

Next SaaS Stripe Starter 安全漏洞

Next SaaS Stripe Starter is an integrated payment and authentication SaaS project starter developed by mickasmt as a personal developer. Version 1.0.0 of Next SaaS Stripe Starter contains a security vulnerability. This vulnerability stems from incorrect operations on the openCustomerPortal functi...

CVE-2025-67260

The Terrapack software, from ASTER TEC / ASTER S.p.A., with the indicated components and versions has a file upload vulnerability that may allow attackers to execute arbitrary code. Vulnerable components include Terrapack TkWebCoreNG:: 1.0.20200914, Terrapack TKServerCGI 2.5.4.150, and Terrapack...

Filament 安全漏洞

Filament is a set of open-source full-stack components developed by Filament, designed to accelerate Laravel development. Versions 4.0.0 to 4.8.4, as well as 5.0.0 to 5.3.4, have security vulnerabilities. These vulnerabilities stem from two Filament Table summarizers not being escaped HTML...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 – React2Shell React Server Components / Next...

Malicious code in inter-site-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad622d6ddd0ce9148ff340b01f319e962703b87b7aa2cb0284e97d7d880f0d90 The package inter-site-components was found to contain malicious code...

MAL-2026-1751 Malicious code in inter-site-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad622d6ddd0ce9148ff340b01f319e962703b87b7aa2cb0284e97d7d880f0d90 The package inter-site-components was found to contain malicious code...

Malicious code in components-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca129c441caef97d904867f91617f53799650e2f2deef3f531a3a18dfc917efa The package components-design-system was found to contain malicious code...

MAL-2026-1696 Malicious code in components-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca129c441caef97d904867f91617f53799650e2f2deef3f531a3a18dfc917efa The package components-design-system was found to contain malicious code...

Malicious code in @nxt-costco-com/forge-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0e0f35823f6346841117866bac7213bfac75a55af137f2e63b2ac33dba9a54 The package @nxt-costco-com/forge-components was found to contain malicious code...

MAL-2026-1631 Malicious code in @nxt-costco-com/forge-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0e0f35823f6346841117866bac7213bfac75a55af137f2e63b2ac33dba9a54 The package @nxt-costco-com/forge-components was found to contain malicious code...

Malicious code in @legacy-components/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b258e05eab0fc8de2df76077146cfaeb5a98fcaf9f13d1a54d4d24f70c0fe8c7 The package @legacy-components/core was found to contain malicious code...

MAL-2026-1627 Malicious code in @legacy-components/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b258e05eab0fc8de2df76077146cfaeb5a98fcaf9f13d1a54d4d24f70c0fe8c7 The package @legacy-components/core was found to contain malicious code...

CVE-2025-31966 Boolean-Based SQL Injection in Multiple Unica Components

HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, these are not enforced by the web server. An attacker can bypass these restrictions by sending manipulated HTTP requests directly to the server...

CVE-2025-31966

CVE-2025-31966 : HCL Sametime is vulnerable due to broken server-side validation that fails to enforce client-side input checks. An attacker can bypass restrictions by sending manipulated HTTP requests directly to the server. The documented CVSS 3.1 metrics indicate a LOW base score (2.7), with n...

The vulnerability of Google Chrome and Microsoft Edge browsers’ CSS components allows attackers to trigger a service failure.

The vulnerability of Google Chrome and Microsoft Edge browsers’ CSS components is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

CVE-2025-62319 Boolean-Based SQL Injection in Multiple Unica Components

Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions TRUE or FALSE into application input fields. Instead of returning database errors or visible data, the application responds differently depending on whether the...

CVE-2025-62319 Boolean-Based SQL Injection in Multiple Unica Components

Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions TRUE or FALSE into application input fields. Instead of returning database errors or visible data, the application responds differently depending on whether the...

CVE-2025-62319

CVE-2025-62319 is described in Connected CVE records as a Boolean-Based SQL Injection affecting Multiple Unica Components. The root cause is blind SQL injection via boolean conditions injected into application input, causing the application to respond differently based on true/false evaluations. ...