Exploit for CVE-2025-34300

Sawtooth Lighthouse Studio has a template injection vulnerabilit...

MAL-2025-21838 Malicious code in grape-lighthouse-8yb7 (npm)

The package grape-lighthouse-8yb7 was found to contain malicious code...

MAL-2025-24015 Malicious code in juliet-lighthouse-il5w (npm)

The package juliet-lighthouse-il5w was found to contain malicious code...

MAL-2025-25268 Malicious code in lighthouse-beetroot-3esx (npm)

The package lighthouse-beetroot-3esx was found to contain malicious code...

MAL-2025-25269 Malicious code in lighthouse-beetroot-uw5y (npm)

The package lighthouse-beetroot-uw5y was found to contain malicious code...

MAL-2025-25270 Malicious code in lighthouse-date-hf2i (npm)

The package lighthouse-date-hf2i was found to contain malicious code...

MAL-2025-25272 Malicious code in lighthouse-vinegar-neu2 (npm)

The package lighthouse-vinegar-neu2 was found to contain malicious code...

MAL-2025-37324 Malicious code in turnip-lighthouse-3s9u (npm)

The package turnip-lighthouse-3s9u was found to contain malicious code...

Malicious code in juliet-lighthouse-il5w (npm)

The package juliet-lighthouse-il5w was found to contain malicious code...

Malicious code in lighthouse-beetroot-3esx (npm)

The package lighthouse-beetroot-3esx was found to contain malicious code...

Malicious code in lighthouse-beetroot-uw5y (npm)

The package lighthouse-beetroot-uw5y was found to contain malicious code...

Malicious code in lighthouse-quinoa-v6vv (npm)

The package lighthouse-quinoa-v6vv was found to contain malicious code...

Malicious code in lighthouse-vinegar-neu2 (npm)

The package lighthouse-vinegar-neu2 was found to contain malicious code...

Malicious code in turnip-lighthouse-3s9u (npm)

The package turnip-lighthouse-3s9u was found to contain malicious code...

Malicious code in lighthouse-date-hf2i (npm)

The package lighthouse-date-hf2i was found to contain malicious code...

MAL-2025-25271 Malicious code in lighthouse-quinoa-v6vv (npm)

The package lighthouse-quinoa-v6vv was found to contain malicious code...

Malicious code in grape-lighthouse-8yb7 (npm)

The package grape-lighthouse-8yb7 was found to contain malicious code...

VulnCheck KEV: CVE-2025-34300

A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands...

Lighthouse Data GPMAW 14 security vulnerability

Lighthouse data GPMAW 14 is a program for detailed analysis of the primary structure of proteins and peptides from Lighthouse data, Denmark. A security vulnerability exists in the Lighthouse data GPMAW 14 version that stems from insecure file permissions that could lead to elevated privileges...

ciwweb.pl Code Execution

The vulnerability of the ciwweb.pl script used by Lighthouse Studio for creating and conducting surveys is related to the improper elimination of special elements used in the templater. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...