Malicious code in multicontent-style-lib (npm)

The package multicontent-style-lib was found to contain malicious code...

MAL-2025-25073 Malicious code in ledvance-living-style-guide (npm)

The package ledvance-living-style-guide was found to contain malicious code...

MAL-2025-38672 Malicious code in vue-rt-style-kit-aks (npm)

The package vue-rt-style-kit-aks was found to contain malicious code...

MAL-2025-18664 Malicious code in dotenv-parse-variables-scorpius-borealis-style-loader (npm)

The package dotenv-parse-variables-scorpius-borealis-style-loader was found to contain malicious code...

MAL-2025-40447 Malicious code in yelp-style-utils (npm)

The package yelp-style-utils was found to contain malicious code...

MAL-2025-23331 Malicious code in iota-style-loader-lepton-cygnus (npm)

The package iota-style-loader-lepton-cygnus was found to contain malicious code...

MAL-2025-21332 Malicious code in geoarchaeology-vulcan-celeste-style-loader (npm)

The package geoarchaeology-vulcan-celeste-style-loader was found to contain malicious code...

MAL-2025-26608 Malicious code in module-speleology-style-loader-singularitarianism (npm)

The package module-speleology-style-loader-singularitarianism was found to contain malicious code...

MAL-2025-34370 Malicious code in tachyon-style-loader-sadr-hapi (npm)

The package tachyon-style-loader-sadr-hapi was found to contain malicious code...

MAL-2025-32064 Malicious code in remark-commitizen-sirius-css-loader (npm)

The package remark-commitizen-sirius-css-loader was found to contain malicious code...

MAL-2025-26423 Malicious code in mini-css-extract-plugin-jabbah-dotenv-safe-asthenosphere (npm)

The package mini-css-extract-plugin-jabbah-dotenv-safe-asthenosphere was found to contain malicious code...

MAL-2025-9665 Malicious code in @wisetail/style-provider (npm)

The package @wisetail/style-provider was found to contain malicious code...

MAL-2025-29141 Malicious code in phoebe-postcss-style-loader-geomorphology (npm)

The package phoebe-postcss-style-loader-geomorphology was found to contain malicious code...

MAL-2025-34113 Malicious code in style-console (npm)

The package style-console was found to contain malicious code...

MAL-2025-33298 Malicious code in singularity-ultra-style-loader-ionosphere (npm)

The package singularity-ultra-style-loader-ionosphere was found to contain malicious code...

MAL-2025-34115 Malicious code in style-format (npm)

The package style-format was found to contain malicious code...

CVE-2025-3703 WordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wipeoutmedia CSS & JavaScript Toolbox css-javascript-toolbox allows PHP Local File Inclusion.This issue affects CSS & JavaScript Toolbox: from n/a through 12.0.3...

WordPress plugin CSS & JavaScript Toolbox security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

Linux Distros Unpatched Vulnerability : CVE-2019-17022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer does not escape characters. Because the resulting string is pasted directly int...

BIT-LIBPHP-2024-5585 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command ar...