1338 matches found
Malicious code in epic-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416eb37a5b2cf58f2f8a11a2946103da14fa271d316177801256fcdb830b87f4 The package epic-hooks was found to contain malicious code...
MAL-2025-49157 Malicious code in epic-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416eb37a5b2cf58f2f8a11a2946103da14fa271d316177801256fcdb830b87f4 The package epic-hooks was found to contain malicious code...
n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook
Impact A remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use of the Commit operation in the Git Node can inadvertently trigg...
GHSA-XGP7-7QJQ-VG47 n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook
Impact A remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use of the Commit operation in the Git Node can inadvertently trigg...
Unsafe Dependency Resolution
Amendment This issue was found to be a duplicate. The original vulnerability with details can be found here. Credit: Assaf Levkovich...
CVE-2025-62726
The CVE-2025-62726 entry concerns n8n (Cloud and Self-Hosted) with a remote code execution vulnerability in the Git Node prior to 1.113.0. When cloning a remote repository containing a pre-commit hook, a subsequent Commit operation can trigger the hook, allowing arbitrary code execution in the n8...
n8n 安全漏洞
n8n is a scalable workflow automation tool from n8n open source. A security vulnerability exists in versions prior to n8n 1.113.0 that originates when the Git Node component triggers execution when cloning remote repositories containing pre-commit hooks, which could lead to remote code execution...
EUVD-2025-36833
Malicious code in react-async-component-lifecycle-hooks npm...
SUSE CVE-2025-61595
MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract,...
GO-2025-3997 github.com/MANTRA-Chain/mantrachain/x/tokenfactory tx gas limit is not enforced in send hooks in github.com/MANTRA-Chain/mantrachain
github.com/MANTRA-Chain/mantrachain/x/tokenfactory tx gas limit is not enforced in send hooks in github.com/MANTRA-Chain/mantrachain...
Truffle Security Co. TruffleHog git arbitrary code execution vulnerability
Talos Vulnerability Report TALOS-2025-2243 Truffle Security Co. TruffleHog git arbitrary code execution vulnerability October 20, 2025 CVE Number CVE-2025-41390 SUMMARY An arbitrary code execution vulnerability exists in the git functionality of Truffle Security Co. TruffleHog 3.90.2. A specially...
CLSA-2025-1760018787 cloud-init: Fix of CVE-2024-11584
CVE-2024-11584: fix systemd socket unit permission vulnerability to prevent unprivileged user from triggering hotplug-hook commands...
EUVD-2007-5020
Malware in sbrugna...
EUVD-2018-6510
Malware in sbrugna...
EUVD-2007-4949
Malware in sbrugna...
EUVD-2007-4953
Malware in sbrugna...
EUVD-2010-2456
Malware in sbrugna...
EUVD-2007-4950
Malware in sbrugna...