1454 matches found
Growatt ShineLan-X 安全漏洞
Growatt ShineLan-X is a data logger for PV inverters from Growatt China. A security vulnerability exists in Growatt ShineLan-X, which stems from the SWD debugging interface enabled by default and could lead to the extraction of device secrets or domains...
Malicious Package
Overview @cheqplease/structured-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
MAL-2025-192434 Malicious code in @cheqplease/structured-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4111b892bba0089b3619c99cd5135fa3693d4a78c790a23017e359beff0cd8 The package @cheqplease/structured-logger was found to contain malicious code. Source: ghsa-malware...
Malicious code in @cheqplease/structured-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4111b892bba0089b3619c99cd5135fa3693d4a78c790a23017e359beff0cd8 The package @cheqplease/structured-logger was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-202449
Malicious code in @cheqplease/structured-logger npm...
Malicious code in sing-fest-es-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568dedb347f57208c9d7934b8818262beac7eba759430a41f2d3a12d23e12399 The package sing-fest-es-logger was found to contain malicious code...
MAL-2025-191587 Malicious code in sing-fest-es-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568dedb347f57208c9d7934b8818262beac7eba759430a41f2d3a12d23e12399 The package sing-fest-es-logger was found to contain malicious code...
Malicious code in chat-prompt-logger (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f25a736985f5c0bb50156fdc7de61e976b16416f42c44a2682b5ce718401383b The package provides a logger of LLM prompts that at the same time looks for hidden instructions and executes them. --- Category: MALICIOUS - The campaign has...
MAL-2025-191699 Malicious code in chat-prompt-logger (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f25a736985f5c0bb50156fdc7de61e976b16416f42c44a2682b5ce718401383b The package provides a logger of LLM prompts that at the same time looks for hidden instructions and executes them. --- Category: MALICIOUS - The campaign has...
MAL-2025-191354 Malicious code in @voiceflow/logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8694ddb108f95b95b2ab31e65a4ff5ec96ff47c5acbbdbec749b7319fe58e3bc The package @voiceflow/logger was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199408
Malicious code in @voiceflow/logger npm...
Malicious code in @voiceflow/logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8694ddb108f95b95b2ab31e65a4ff5ec96ff47c5acbbdbec749b7319fe58e3bc The package @voiceflow/logger was found to contain malicious code. Source: ghsa-malware...
Updated ruby-rack packages fix security vulnerabilities
Possible Log Injection in Rack::CommonLogger. CVE-2025-25184 Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection. CVE-2025-27111 Local File Inclusion in Rack::Static. CVE-2025-27610...
Malicious Package
Overview servicecore-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
METZ CONNECT多款产品 访问控制错误漏洞
METZ CONNECT Energy-Controlling EWIO2-M and others are products of METZ CONNECT, Germany.METZ CONNECT Energy-Controlling EWIO2-M is a high performance data logger.METZ CONNECT Energy- Controlling EWIO2-M-BM is a high performance data logger.METZ CONNECT Ethernet-IO EWIO2-BM is a sensor and actuat...
Malicious code in ancestry-unified-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 654a8c92f4dee2f432b77c84c15e3926d913e506e58375a0958c08cc53ff134b The package ancestry-unified-logger was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-190549 Malicious code in ancestry-unified-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 654a8c92f4dee2f432b77c84c15e3926d913e506e58375a0958c08cc53ff134b The package ancestry-unified-logger was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-197876
Malicious code in ancestry-unified-logger npm...
Path Traversal
mllogger is vulnerable to path traversal. the vulnerability is due to manipulation of the File argument in the loghandler function of mllogger/server.py, which allows an attacker to perform path traversal to read, create, or overwrite files remotely...