160 matches found
CVE-2026-33017-Langflow-RCE-PoC
CVE-2026-33017-Langflow-RCE-PoC The vulnerability in Langflow 1.8.1 and earlier allows a remote, unauthenticated attacker to achieve arbitrary command execution on the host. Description The POST /api/v1/buildpublictmp/flowid/flow endpoint permits anyone to build public flows without authenticatio...
Malicious Package
Overview cypress-node-config-phoebe-framework is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...
Malicious Package
Overview algol-stream-node-config-enif is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in node-config-svg-contract (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73906b728364e1fa1f870bd746a0bec46ed3937ff42eef10bea8389729a86c1 The package advertises itself as an SVG/icon CDN helper but its exported functions getPlugin, setPlugin, and getPluginExten construct a URL at runtim...
MAL-2026-13985 Malicious code in node-config-svg-contract (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73906b728364e1fa1f870bd746a0bec46ed3937ff42eef10bea8389729a86c1 The package advertises itself as an SVG/icon CDN helper but its exported functions getPlugin, setPlugin, and getPluginExten construct a URL at runtim...
Malicious Package
Overview node-config-svg-contract is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Incorrect Authorization
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the node exec approvals. An attacker can perform unauthorized actions by exploiting mismatched gateway and node environment configurations to execute or persis...
CVE-2025-69674
Buffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7P161006 Build.0333.250211 allows an attacker to execute arbitrary code via the nodemac, nodeopt, optparam, and domainblk parameters of the meshnodeconfig and domiainblkconfig modules...
CVE-2025-69674
Buffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7P161006 Build.0333.250211 allows an attacker to execute arbitrary code via the nodemac, nodeopt, optparam, and domainblk parameters of the meshnodeconfig and domiainblkconfig modules...
CDATA FD614GS3-R850 安全漏洞
CDATA FD614GS3-R850 is a fiber optic network unit terminal device from the American company CDATA. The version CDATA FD614GS3-R850 V3.2.7P161006 contains a security vulnerability. This vulnerability stems from buffer overflows in the meshnodeconfig and domiainblkconfig modules, which may allow fo...
CVE-2025-69674
Buffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7P161006 Build.0333.250211 allows an attacker to execute arbitrary code via the nodemac, nodeopt, optparam, and domainblk parameters of the meshnodeconfig and domiainblkconfig modules...
PT-2026-20863
Name of the Vulnerable Software and Affected Versions CDATA FD614GS3-R850 version 3.2.7 P161006 Build.0333.250211 Description A buffer overflow issue exists in CDATA FD614GS3-R850 version 3.2.7 P161006 Build.0333.250211. This flaw allows an attacker to potentially execute arbitrary code by...
Malicious code in foundation-node-config-farout-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3793dd3ff731c5c1110f0f04402bcb024a4a5017e8a91628e170d29b6403c4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175792
Malicious code in upgrade-dysonswarm-node-config-got npm...
EUVD-2025-177574
Malicious code in node-config-mini-css-extract-plugin-bellatrix-update npm...
EUVD-2025-177571
Malicious code in node-config-pulsar-buffer-luna npm...
EUVD-2025-176707
Malicious code in release-it-perseus-ini-node-config npm...
EUVD-2025-179654
Malicious code in command-blazar-node-config-phylogenetics npm...