MAL-2026-13669 Malicious code in specials-resources-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...

Malicious code in specials-resources-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...

Malicious code in specials-mvno-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852448e1055feb834486a41aaf7e1a621a52fc4e9a496f34c0bde833e751434b index.js requires bootstrap.js at module load, which fetches an opaque platform-specific binary from string-split Cloudflare Workers hosts...

The vulnerability of the tools.exec.safeBins configuration in the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to execute arbitrary commands.

The vulnerability of the tools.exec.safeBins configuration in the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...

CVE-2026-2869

CVE-2026-2869 affects janet-lang/janet up to 1.40.1. The exposed vulnerability is in the function janetc_varset within src/core/specials.c of the handleattr Handler, leading to an out-of-bounds read. Exploitation is local-only; the exploit is publicly available. Mitigation is upgrading to version...

PT-2026-21378

Name of the Vulnerable Software and Affected Versions janet-lang versions prior to 1.41.0 Description A flaw exists in the janet-lang software, specifically within the janetc varset function located in the src/core/specials.c file, part of the handleattr Handler component. This issue can lead to ...

CVE-2026-2242 janet-lang janet specials.c janetc_if out-of-bounds

A vulnerability was determined in janet-lang janet up to 1.40.1. This impacts the function janetcif of the file src/core/specials.c. Executing a manipulation can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This...

CVE-2026-2242

CVE-2026-2242 affects janet-lang up to 1.40.1. The vulnerability lies in janetc_if within src/core/specials.c, allowing a local out-of-bounds read due to manipulation. An exploit has been publicly disclosed and a patch identified by the commit c43e06672cd9dacf2122c99f362120a17c34b391 is available...

UBUNTU-CVE-2025-6589

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php. This issue affects MediaWiki: = 1.42.0...

PT-2024-22212

Name of the Vulnerable Software and Affected Versions NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP...

CVE-2023-5112

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "specialstypename1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

PT-2023-31768 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the specials type name1 parameter. This could potentially lead to unauthorized...

Malicious code in @specials/request-tinkoff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70950da2d6265fb0f361f58470cdf72dd46749320aec9096e763b16815dedeaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @specials/resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2350d290f451ccf7a0db726a0286787fd8de1e7fc0d554d64d29446f08592fcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-598 Malicious code in @specials/ib-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30e0d933078498a76da5a427205cc4a746095b8da74087d645cc41abcee0ab08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-604 Malicious code in @specials/resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2350d290f451ccf7a0db726a0286787fd8de1e7fc0d554d64d29446f08592fcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-599 Malicious code in @specials/iframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b999189e0dfecb715deb8b585ae03c3937667b023e07b8ea37c716d8209c77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-602 Malicious code in @specials/obid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bb6b9439609ed08b0cd6b225dec62445e017f8b2130faf5fe7ebf9ddf39db39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @specials/obid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bb6b9439609ed08b0cd6b225dec62445e017f8b2130faf5fe7ebf9ddf39db39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-597 Malicious code in @specials/form-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94c33ab7327a7a4e72915d6e97a8163ec03b0b0d0b39d02ef1b712ff2e3db941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...