41262 matches found
MAL-2026-2826 Malicious code in dom-utils-lite (npm)
dom-utils-lite and centralogger, with identical payloads. On npm install, a postinstall hook fetches the attacker’s SSH public key from a Supabase storage bucket, appends it to /.ssh/authorizedkeys, harvests the victim’s IP, username, and hostname, then uploads that metadata to the same Supabase...
EUVD-2026-22209
PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the workflow engine is vulnerable to arbitrary command and code execution through untrusted YAML files. When praisonai workflow run loads a YAML file with type: job, the...
CVE-2026-40288
PraisonAI and praisonaiagents prior to versions 4.5.139 and 1.5.140 are exposed to a critical RCE via untrusted workflow YAML. When a YAML file for type: job is loaded, the JobWorkflowExecutor (job_workflow.py) processes steps allowing run (subprocess.run), script (inline Python via exec), and py...
CVE-2026-40288 PraisonAI: Critical RCE via `type: job` workflow YAML
PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the workflow engine is vulnerable to arbitrary command and code execution through untrusted YAML files. When praisonai workflow run loads a YAML file with type: job, the...
EUVD-2026-22134
Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details...
Microsoft Windows Shell 资源管理错误漏洞
The Microsoft Windows Shell is the graphical user interface for the Windows operating system from Microsoft.The easily recognizable elements of the Windows shell include features such as the desktop, the taskbar, the start menu, the task switcher, and autoplay. An elevation of privilege...
Microsoft Windows Shell 资源管理错误漏洞
The Microsoft Windows Shell is the graphical user interface for the Windows operating system from Microsoft.The easily recognizable elements of the Windows shell include features such as the desktop, the taskbar, the start menu, the task switcher, and autoplay. An elevation of privilege...
Microsoft Windows Shell 安全漏洞
The Microsoft Windows Shell is the graphical user interface for the Windows operating system from Microsoft.The easily recognizable elements of the Windows shell include features such as the desktop, the taskbar, the start menu, the task switcher, and autoplay. A security feature bypass...
Microsoft Windows Shell 信息泄露漏洞
The Microsoft Windows Shell is the graphical user interface for the Windows operating system from Microsoft USA.Easily recognizable elements of the Windows shell include features such as the desktop, the taskbar, the start menu, the task switcher, and autoplay. On some versions of Windows, featur...
CVE-2026-32202: Protection Mechanism Failure
Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
PT-2026-32854
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A protection mechanism failure in the Windows Shell allows a remote unauthorized attacker to perform spoofing. The issue occurs when a malicious Windows shortcut or LNK path trigger...
CVE-2026-27918: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...
KB5082123: Windows 10 version 1809 / Windows Server 2019 Security Update (April 2026)
The remote Windows host is missing security update 5082123. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...
KB5082142: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (April 2026)
The remote Windows host is missing security update 5082142. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...
PT-2026-32868
CVE-2026-32225 Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. https://t.co/quolUhDQ1c...
PT-2026-32742
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A use after free issue in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free is a condition where a program continues to use a pointer after it ha...
PT-2026-32743
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A double free issue in Windows Shell allows an authorized attacker to elevate privileges locally, enabling a user to gain administrative access to the system. Recommendations At the...
CVE-2026-32151: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network...