CERT/CC Vulnerability Notes پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۸:۳۹

VU#685399: PromZard context key code injection leads to remote code execution

Overview The npm library promzard, versions 4.0.0 and earlier, is vulnerable to remote code execution due to direct string interpolation of context object keys, which allows unsanitized JavaScript code injection. Description promzard is a Node.js library designed to automate configuration workflows by evaluating template modules and generating data objects via interactive prompting. The library allows users to provid…

Vulnerabilities & Zero-Day Programming & Languages

Read the full article at CERT/CC Vulnerability Notes Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Canadian Centre for Cyber Security پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۸:۵۶

Fortinet security advisory (AV26-1145)

Vulnerabilities & Zero-Day

Source

CSO Online پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۸:۴۵

Palo Alto tracks a massive Chinese AI attack that sadly lives up to industry fears

Palo Alto Networks Unit 42 is reporting today that it has tracked a massive China-based attack leveraging the open-source AI penetration testing framework Cairn to autonomously conduct 25 operations against at least 19 organizations. The attackers weaponized Cairn by pairing it with Chinese AI models Zhipu GLM and DeepSeek, Unit 42 said. The report said it monitored the attacks in August and September 2026 in which t…

Vulnerabilities & Zero-Day Open Source Penetration Testing

Source

Canadian Centre for Cyber Security پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۸:۳۴

HPE security advisory (AV26-1144)

Vulnerabilities & Zero-Day Networking & Internet

Source

Akamai Security Research پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۸:۳۰

When AI Finds the Bugs: Rethinking Exposure in a Flood of Vulnerabilities

Vulnerabilities & Zero-Day

Source