MAL-2025-17975 Malicious code in dashboard-v3 (npm)

The package dashboard-v3 was found to contain malicious code...

MAL-2025-9237 Malicious code in @plentific/dashboard (npm)

The package @plentific/dashboard was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-19672 Malicious code in enterprise-dashboard-frontend.regex-builder-service (npm)

The package enterprise-dashboard-frontend.regex-builder-service was found to contain malicious code...

Malicious code in vizi-dashboard (npm)

The package vizi-dashboard was found to contain malicious code...

Malicious code in zipkey-dashboard (npm)

The package zipkey-dashboard was found to contain malicious code...

Malicious code in petal-dashboard-ui (npm)

The package petal-dashboard-ui was found to contain malicious code...

Malicious code in eventelis-dashboard (npm)

The package eventelis-dashboard was found to contain malicious code...

MAL-2025-9090 Malicious code in @marcos_feitoza/dashboard (npm)

The package @marcosfeitoza/dashboard was found to contain malicious code...

MAL-2025-38519 Malicious code in vizi-dashboard (npm)

The package vizi-dashboard was found to contain malicious code...

MAL-2025-41020 Malicious code in zipkey-dashboard (npm)

The package zipkey-dashboard was found to contain malicious code...

MAL-2025-6876 Malicious code in responsive-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4afdda2858edbdcc921f3ba82cbd2e348994eb5d31b6a87f4487dd774ee554f7 The OpenSSF Package Analysis project identified 'responsive-dashboard' @ 2.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in responsive-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4afdda2858edbdcc921f3ba82cbd2e348994eb5d31b6a87f4487dd774ee554f7 The OpenSSF Package Analysis project identified 'responsive-dashboard' @ 2.0.0 npm as malicious. It is considered malicious because: - The packa...

CVE-2025-8798

A vulnerability was found in oitcode samarium up to 0.9.6. It has been classified as critical. Affected is an unknown function of the file /dashboard/product of the component Create Product Page. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2025-52136

In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface. NOTE: the Supplier's position is that this is the intended behavior; however, 5.8.6 adds a defense-in-depth feature in which a plugin's acceptability for later Dashboard installation is set b...

📄 Wazuh Server Remote Code Execution

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are serialized as JSON and...

Visualize Security Success with the Security Summary Dashboard

...

CVE-2025-8798

A vulnerability was found in oitcode samarium up to 0.9.6. It has been classified as critical. Affected is an unknown function of the file /dashboard/product of the component Create Product Page. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2025-8798

The CVE-2025-8798 entry concerns oitcode samarium versions up to 0.9.6. The vulnerability is an unrestricted file upload in the /dashboard/product area of the Create Product Page component. The underlying issue allows a remote attacker to upload arbitrary files, with exploitation being publicly d...

CVE-2025-8798 oitcode samarium Create Product product unrestricted upload

A vulnerability was found in oitcode samarium up to 0.9.6. It has been classified as critical. Affected is an unknown function of the file /dashboard/product of the component Create Product Page. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2025-52136

In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface. NOTE: the Supplier's position is that this is the intended behavior; however, 5.8.6 adds a defense-in-depth feature in which a plugin's acceptability for later Dashboard installation is set b...