9709 matches found
CVE-2025-34291 Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE
Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration alloworigins='' with allowcredentials=True combined with a refresh token cookie configured as SameSite=None allows a malicio...
Malicious code in tailwindcss-setfont (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f910baae4eb0176c7c1c4b6bde6db28967b1f8674784e8953fe7abb47d7730a4 The package tailwindcss-setfont was found to contain malicious code. Source: ghsa-malware...
MAL-2025-192311 Malicious code in react-icon-updater (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755e55af72b70c14edf83bdaea2cbd76dff5c7ab6410f9e3f44f7b521e7248b3 The package react-icon-updater was found to contain malicious code. Source: ghsa-malware...
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7909-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7909-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
Malicious code in elf-stats-marzipan-cocoa-562 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5eef2a7b97397b3b317b2e74da3cf23e6c43147a144bed8c3fbcbb35ca6249f The package elf-stats-marzipan-cocoa-562 was found to contain malicious code. Source: ghsa-malware...
Malicious code in elf-stats-lanternlit-snowman-834 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ba8a53d8eaf81612c735ecd48fa5c485199e190ba2e4047f1160d5ad1d9dc The package elf-stats-lanternlit-snowman-834 was found to contain malicious code. Source: ghsa-malware...
Adobe Experience Manager (AEM) Felix Console Default Credentials
The remote Adobe Experience Manager AEM Felix Console is configured with default or predictable credentials, which could allow an attacker to gain unauthorized access to the application and potentially compromise the underlying system. No source data...
Malicious code in tailwindcss-animation-css (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fda6d7eaefe792f8b06f7ef177feea15d90da13962dbe59f48d7987a234aca The package tailwindcss-animation-css was found to contain malicious code. Source: ghsa-malware...
Malicious code in dotenv-intend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b29ae1386b4f6a14de72979eae00fc96b33b8a080975db5c8eb8917d23fdeff The package dotenv-intend was found to contain malicious code. Source: ghsa-malware 64a31dce3bccc8134695abbe65011f655e810a0a28726ce2d60668e3689ab605...
Malicious code in chai-test-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4f5ebd52a0912210e31f29b89e1199fadcf3bfddd5557b38e388f9b6df8315 The package chai-test-await was found to contain malicious code. Source: ghsa-malware a25b0475f84c41d68c89ffad60b4dc123876d634fbe93a793fae42da8e1112b...
MAL-2025-191970 Malicious code in kwp-router (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9ede748713472b716d7f508167d66d972607368a0674962d092728ee8ed184 The package kwp-router was found to contain malicious code. Source: ghsa-malware a55b4e54ef732ba70cdf1b376d19fe90c45e48f36c812166e99545e9e798b807 Any...
EUVD-2025-200311
JumpCloud Remote Assist for Windows versions prior to 0.317.0 include an uninstaller that is invoked by the JumpCloud Windows Agent as NT AUTHORITY\SYSTEM during agent uninstall or update operations. The Remote Assist uninstaller performs privileged create, write, execute, and delete actions on...
CVE-2025-34352
JumpCloud Remote Assist for Windows versions prior to 0.317.0 include an uninstaller that is invoked by the JumpCloud Windows Agent as NT AUTHORITY\SYSTEM during agent uninstall or update operations. The Remote Assist uninstaller performs privileged create, write, execute, and delete actions on...
Malicious code in chai-status (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f6f6dd537cdb195504efe77187096dff2f05e7ffd064975c9f54a4d45e17b9 The package chai-status was found to contain malicious code. Source: ghsa-malware ac16fe9f8e1d6ef61aa920967a83f93dc57d69f70b534ac70a2e59870b2b3533 An...
Malicious code in ddos-l7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0820d1cfcceb97e14d10335c631de12d5974fe1617474c94a09055a982607c8 The package ddos-l7 was found to contain malicious code. Source: ghsa-malware 35f98f327ff2e7b3a2558a70bc1b22fd31196c2c76b242645df4bd9c03e1e1ec Any...
Malicious code in react-animated-glow (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c046e67371a339da9e3c12d108f16059eb5eed933f54d51b3429a77effdcdf8a The package react-animated-glow was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191553 Malicious code in tailwind-scrollbar-variant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7a64f578e119daa50df50bd0cd9178bd4035b7ca595a72dc2b10da57b658d9 The package tailwind-scrollbar-variant was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191539 Malicious code in @shr3k/tdspt-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970d2332c5e9ef4f3faff216f48d253ce2572e8b7f090b144d1dfa2749b15b1 The package @shr3k/tdspt-helper was found to contain malicious code. Source: ghsa-malware...
Malicious code in @wxi-dev/serverless-tsc-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2044be2f48924b1fbab5515839d24440bd12b3d7df98de95a6b0881665ab3f94 The package @wxi-dev/serverless-tsc-config was found to contain malicious code. Source: ghsa-malware...
