Malicious code in deimos-eslint-plugin-remark-spica (npm)

The package deimos-eslint-plugin-remark-spica was found to contain malicious code...

Malicious code in remark-celeste-hydra-cressida (npm)

The package remark-celeste-hydra-cressida was found to contain malicious code...

MAL-2025-45799 Malicious code in remark-exoplanetology-meissa-astro (npm)

The package remark-exoplanetology-meissa-astro was found to contain malicious code...

Malicious code in umbra-luna-wasat-remark (npm)

The package umbra-luna-wasat-remark was found to contain malicious code...

Malicious code in remark-callisto-reveal-md-chai (npm)

The package remark-callisto-reveal-md-chai was found to contain malicious code...

MAL-2025-45722 Malicious code in quark-socketio-configstore-remark (npm)

The package quark-socketio-configstore-remark was found to contain malicious code...

MAL-2025-45798 Malicious code in remark-charon-await-kinetic (npm)

The package remark-charon-await-kinetic was found to contain malicious code...

MAL-2025-45797 Malicious code in remark-celeste-hydra-cressida (npm)

The package remark-celeste-hydra-cressida was found to contain malicious code...

CVE-2025-50976

IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2025-50976

IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2025-50976

IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2025-50976

IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2025-50976

IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...

PT-2025-34800 · Ipfire · Ipfire

Name of the Vulnerable Software and Affected Versions: IPFire version 2.29 Description: The DNS management interface dns.cgi in IPFire fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS HOSTNAME query parameters. This results in a reflected cross-site scripting XSS...

CVE-2025-50976

IPFire 2.29 DNS management interface (dns.cgi) is affected by a reflected XSS due to insufficient sanitization of user input in the NAMESERVER, REMARK, and TLS_HOSTNAME query parameters. The root cause is improper input handling in dns.cgi, enabling reflected XSS payloads. Documented impact is li...

Malicious code in remark-canonical-link-plugin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b975fb6f22bd9fcdcea9c2ef29c6fadc73269624920351490d8cda8e561199d The OpenSSF Package Analysis project identified...

MAL-2025-41320 Malicious code in remark-cross-site-link-plugin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c7fd443fcaba7627f28aa45f16610fef8703f54b0f2dad9c22642c2d428a278 The OpenSSF Package Analysis project identified...

Linux Distros Unpatched Vulnerability : CVE-2023-22491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions...

CVE-2025-8987

A vulnerability was identified in SourceCodester COVID 19 Testing Management System 1.0. This affects an unknown part of the file /test-details.php. The manipulation of the argument remark leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to th...

CVE-2025-8987

A vulnerability was identified in SourceCodester COVID 19 Testing Management System 1.0. This affects an unknown part of the file /test-details.php. The manipulation of the argument remark leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to th...