CVE-2025-54720

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SteelThemes Nest Addons nest-addons allows SQL Injection.This issue affects Nest Addons: from n/a through = 1.6.3...

CVE-2025-54720

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SteelThemes Nest Addons nest-addons allows SQL Injection.This issue affects Nest Addons: from n/a through = 1.6.3...

CVE-2025-54720 WordPress Nest Addons Plugin <= 1.6.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SteelThemes Nest Addons allows SQL Injection. This issue affects Nest Addons: from n/a through 1.6.3...

CVE-2025-54720

CVE-2025-54720 describes an SQL injection in the WordPress plugin Nest Addons by SteelThemes, affecting versions up to 1.6.3. Root cause: improper neutralization of input elements used in SQL commands. The vulnerability is listed as patched in version 1.6.3, with advisories indicating the fix req...

CVE-2025-54720 WordPress Nest Addons Plugin <= 1.6.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SteelThemes Nest Addons nest-addons allows SQL Injection.This issue affects Nest Addons: from n/a through = 1.6.3...

PT-2025-35071

Name of the Vulnerable Software and Affected Versions: SteelThemes Nest Addons versions through 1.6.3 Description: The software contains an Improper Neutralization of Special Elements used in an SQL Command vulnerability, which allows SQL Injection. Recommendations: Update SteelThemes Nest Addons...

WordPress plugin Nest Addons SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

Remote Code Execution (RCE)

@nestjs/devtools-integration is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper sandboxing and missing cross-origin protections due to unsafe execution of attacker-controlled input in a JavaScript sandbox via the /inspector/graph/interact endpoint...

UBUNTU-CVE-2025-38614

In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EPMAXNESTS+1 links. Currently, eploopcheckproc ensures that the graph is loop-free and does some recursion depth checks, but...

PT-2025-31707

Name of the Vulnerable Software and Affected Versions: @nestjs/devtools-integration versions 0.2.0 and below Description: A critical Remote Code Execution RCE vulnerability exists in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with a...

kernel: nbd: null check for nla_nest_start

In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nlaneststart The Linux kernel CVE team has assigned CVE-2024-27025 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050107-CVE-2024-27025-babd@gregkh/T...

BIT-MARIADB-MIN-2021-46659

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

CVE-2023-26135

All versions of the package flatnest are vulnerable to Prototype Pollution via the nest function in the flatnest/nest.js file...

CVE-2022-44069

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via the Nest library module...

CVE-2018-13008

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for a positive nestlevel...

CVE-2019-5034

An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigger this...

CVE-2019-5043

An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability...

CVE-2024-29409

File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Type header...

nest 代码注入漏洞

nest is a Node.js framework open-sourced by nestjs for building efficient, scalable and enterprise-class server-side applications using TypeScript/JavaScript. A security vulnerability exists in nest version v.10.3.2, which stems from a Content-Type header that allows remote attackers to execute...

Malicious code in link-outside-nest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60138fd924427918d630cea0c05320160d12aa498336cbb87a174ee5eb2231db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...