Exploit for Missing Authentication for Critical Function in Langflow

CVE-2025-3248: Langflow Unauthenticated RCE Vulnerability Scan...

CVE-2025-12528

CVE-2025-12528 concerns the Pie Forms for WP WordPress plugin (versions <= 1.6). The issue is an Arbitrary File Upload due to insufficient file-type validation: validate_classic checks extensions but does not stop the upload, enabling unauthenticated attackers to upload dangerous extensions (e...

CVE-2025-60694

A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...

EUVD-2025-175327

A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...

CVE-2025-60694

A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...

CVE-2025-60694

A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...

Malicious code in quick-validate-transpile-cluster-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee10f0bcabc32d9ac66632a283a2ba700f31cfdfd2a8f280a980368720bf754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sun-serialize-parse-validate-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13920f3f0ca3140df6e86d32d1c7763b6f4bdfb166b23361ada1f3d12873e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theta-validate-meta-air-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d3e186b062df4165b4ff6124f4467a91df506dc840e45e44a67191212c48ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175879

Malicious code in tree-validate-info-signal-abstract npm...

EUVD-2025-175701

Malicious code in visualize-validate-array-hot-analyze npm...

EUVD-2025-176592

Malicious code in root-user-await-validate-iota npm...

EUVD-2025-179052

Malicious code in error-validate-refactor-byte-lambda npm...

EUVD-2025-180172

Malicious code in awk-validate-function-refactor-delta npm...

EUVD-2025-179852

Malicious code in cat-encrypt-export-kappa-validate npm...

EUVD-2025-179844

Malicious code in catch-daemon-mock-emulate-validate npm...

EUVD-2025-179758

Malicious code in char-xml-xml-validate-validate npm...

EUVD-2025-176140

Malicious code in sun-serialize-parse-validate-alert npm...

EUVD-2025-179622

Malicious code in compile-validate-sandbox-node-async npm...

EUVD-2025-177177

Malicious code in pi-validate-water-test-tau npm...