nitely/spirit 0.12.3 - Open Redirect

Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3. id: CVE-2022-0869 info: name: nitely/spirit 0.12.3 - Open Redirect author: ctflearner severity: medium description: | Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3. impact: | An attacker can...

@nk-spirit/nk-ngx-bootstrap (7.1.16) potentially affected by CVE-2026-101895 via @angular/platform-server (11.2.0)

@angular/platform-server NPM version 11.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - @nk-spirit/nk-ngx-bootstrap 7.1.16 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...

Malicious code in ecto-spirit (npm)

Source: amazon-inspector 47b836667ecfcf9ebf94ca27412a66b50088c2e6dcfffde861a901c2c3fd5678 The package ecto-spirit was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ecto-spirit-core (npm)

Source: amazon-inspector 72d3638a38fd250b18d9b93068dc16f07d03d34e87c361a41069ac57740f2629 The package ecto-spirit-core was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ectoplast-spirit (npm)

Source: amazon-inspector efb7edb34ad0e4e3740692b2f80f2ec2085ad2557e947920c3acdd71626a8b99 The package ectoplast-spirit was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in depend-spirit-monkey (npm)

The package depend-spirit-monkey was found to contain malicious code. --- Credit: OpenSSF source...

nitely/spirit 0.12.3 - Open Redirect Detection

Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Malicious code in airflow-provider-spirit (PyPI)

Source: amazon-inspector b565bd72c6acb3adb077ac7923ddf40d12a4922cb8bea5d22a43590e7c57d8e6 The package is advertised as an Airflow provider but src/airflowproviderspirit/init.py contains only a 20-line stub with no Airflow integration. setup.py's custom install command copies telemetry.pth into...

Malicious Package

Overview airflow-provider-spirit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in airflow-provider-spirit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84edc3b5fdf650aec875a1381b60bf2bb811f0c813ca6841052730fcee025bc3 The package is published as an Airflow provider but ships no provider code. setup.py installs telemetry.pth into site-packages, which auto-imports...

MAL-2026-10754 Malicious code in airflow-provider-spirit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84edc3b5fdf650aec875a1381b60bf2bb811f0c813ca6841052730fcee025bc3 The package is published as an Airflow provider but ships no provider code. setup.py installs telemetry.pth into site-packages, which auto-imports...

PYSEC-2026-631 Open Redirect in django-spirit

django-spirit prior to version 0.12.3 is vulnerable to open redirect. In the /user/login endpoint, it doesn't check the value of the next parameter when the user is logged in and passes it directly to redirect which result to open redirect. This also affects /user/logout, /user/register,...

Open Redirect in django-spirit

django-spirit prior to version 0.12.3 is vulnerable to open redirect. In the /user/login endpoint, it doesn't check the value of the next parameter when the user is logged in and passes it directly to redirect which result to open redirect. This also affects /user/logout, /user/register,...

EUVD-2025-210192

Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...

CVE-2025-69109

Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...

CVE-2025-69109: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...

CVE-2025-69109

Technical details for CVE-2025-69109 are not provided in the supplied documents. No affected versions, root cause, impact, or remediation are stated here. Monitor for updates from the connected sources.

CVE-2025-69109 WordPress Raider Spirit theme <= 1.1.2 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...

CVE-2025-69109 WordPress Raider Spirit theme <= 1.1.2 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...

Malicious code in ecto-spirit-win-k4n8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8082c12f69dfbb45e83017fa0baf4f88f9500649dd443e80f2d7d4f858020814 The package ships a postinstall.js that imports childprocess and references HTTP GET and hostname operations. Without traced-code corroboration of ho...