Arbitrary File Upload

mautic/grapes-js-builder-bundle is vulnerable to Arbitrary File Upload. The vulnerability is due to lack of file type restrictions during uploads, which allows an attacker to upload and execute malicious files on the server...

Security Bulletin: Vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookie might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Eran Hammer cryptiles, PostCSS,Node.js,node-notifier,es5-ext ,MySQL Connectors,json-path and tough-cookier. Vulnerabilities include an attacker is able to brute force something that was supposed to be random, ...

EUVD-2025-203036

Malicious code in pp-js-lib npm...

MAL-2025-192561 Malicious code in pp-js-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ef567b818a3642f6a51a1d26f23c897c1ecc73c6e431361ee1512d288ab455 The package pp-js-lib was found to contain malicious code. Source: ghsa-malware ba1fcfff2f6e86511e78c7092763167dfd731beef4f008cc933bf1bb5b4255e1 Any...

Malicious Package

Overview pp-js-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview cos-js-sdk-v6 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in cos-js-sdk-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d4e667425231cedc1d2417e80767126bd48fa3afc7cc2bbb14ef6ae45df684 The package cos-js-sdk-v6 was found to contain malicious code. Source: ghsa-malware 8c001845c7ca3a227b7e24858fde28811305d6f37bbf10d84f0fa5276c1d146c...

MAL-2025-192557 Malicious code in cos-js-sdk-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d4e667425231cedc1d2417e80767126bd48fa3afc7cc2bbb14ef6ae45df684 The package cos-js-sdk-v6 was found to contain malicious code. Source: ghsa-malware 8c001845c7ca3a227b7e24858fde28811305d6f37bbf10d84f0fa5276c1d146c...

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell CVE-2025-55182 A proof-of-concept exploit demon...

Exploit for CVE-2025-55183

CVE-2025-55183-poc – Next.js React Server Components Server Fu...

@4399ywkf/router (>=0.0.1, <=0.0.4), @akash-aw/aw-wizard-forms (4.14.0) +129 more potentially affected by CVE-2025-55183 +1 more via @modern-js/utils (>=2.65.2, <=2.69.2)

@modern-js/utils NPM version =2.65.2, =0.0.1, =1.0.0, =1.0.0, =0.44.0, =2.23.0, =0.3.53, =1.0.1, =0.30.0, =0.3.0-alpha.1, =0.4.3, =1.3.0, =2.0.0 and more Source cves: CVE-2025-55183, CVE-2025-55184 Source advisory: SNYK:JS-MODERNJSUTILS-15120606...

Deserialization of Untrusted Data

Overview @modern-js/utils is a progressive web framework based on React. Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to unsafe deserialization of payloads from HTTP requests to Server Function endpoints. An attacker can cause the server process to ent...

Exploit for Deserialization of Untrusted Data in Facebook React

🚀 R2S - Next.js RSC Exploit Framework !Versionhttps://im...

Exploit for Deserialization of Untrusted Data in Facebook React

Next.js React Server Components RCE Exploit Exploits CVE-2025...

CVE-2025-55183 and CVE-2025-55184: Mitigating React/Next.js Vulnerabilities

...

EUVD-2025-202631

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 A simp...

Exploit for Deserialization of Untrusted Data in Facebook React

This is a Next.js project bootstrapped wit...

Exploit for Deserialization of Untrusted Data in Facebook React

💥 React2Shell-POC 💥 !pythonhttps://img.shields.io/badge/py...

Mozilla Thunderbird < 140.6

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-96 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146, Firefox ESR...