Malicious code in hardhat-plus (npm)

Source: amazon-inspector 02d908da8470ad86669b080d267b57174ccd77e5fd6ed2c371c430d98e869f2b [email protected] is published under a name resembling the Ethereum development tool 'hardhat' but ships README, type definitions, and docs copied verbatim from the unrelated pino logger project README.md...

CVE-2026-94110: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...

PT-2026-96030

Name of the Vulnerable Software and Affected Versions QCMS versions prior to 6.0.7 Description A remote SQL injection exists in the Content Detail Page component within the self Tmp function located in the Lib/Config/Controllers.php library. The issue occurs when the ID argument is manipulated...

Malicious code in int-lib-config (npm)

--- Credit: OpenSSF source...

Malicious code in int-lib-config-utils (npm)

The package int-lib-config-utils was found to contain malicious code. --- Credit: OpenSSF source...

MAL-2025-41574 Malicious code in int-lib-config (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-23258 Malicious code in int-lib-config-utils (npm)

The package int-lib-config-utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

CVE-2017-0374

lib/Config/Model.pm in Config-Model aka libconfig-model-perl before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array...

CVE-2017-0374: Undefined Security Weakness

lib/Config/Model.pm in Config-Model aka libconfig-model-perl before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array...

CVE-2017-0373: Improper Input Validation

The genclasspod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model aka libconfig-model-perl before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file...

PT-2017-10549

Name of the Vulnerable Software and Affected Versions Config-Model versions prior to 2.102 Description The gen class pod implementation in lib/Config/Model/Utils/GenClassPod.pm has a dangerous "use lib" line. This allows remote attackers to have an unspecified impact via a crafted Debian package...

PT-2017-10550

Name of the Vulnerable Software and Affected Versions Config-Model versions prior to 2.102 Description The issue allows local users to gain privileges via a crafted model in the current working directory. This is related to the use of . with the INC array in the lib/Config/Model.pm file...