EUVD-2026-53642

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of servi...

CVE-2026-18839

The CVE-2026-18839 vulnerability concerns the popt library: an integer size_t underflow occurs when formatting help text for option tables that exceed terminal width. The issue is exploitable locally by causing an application to print help, potentially crashing the application or rendering the he...

CVE-2026-18839

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of servi...

CVE-2026-18839

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of servi...

CVE-2026-18839

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of servi...

MAL-2026-12488 Malicious code in tt-help-cli-ycl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6144be61d70f258741e5d4cc1476021f93e3ce82ffa00a3f86189537a1438a6 The package's tt-help watchdog subcommand starts a long-running agent that POSTs heartbeats to a remote server default hardcoded to...

CVE-2026-18839: Integer Underflow (Wrap or Wraparound)

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of servi...

PT-2026-68332

Name of the Vulnerable Software and Affected Versions popt affected versions not specified Description An integer underflow occurs in the popt library when formatting help text for option tables that exceed the terminal width. A local user can trigger this by causing an application to print help...

Linux Distros Unpatched Vulnerability : CVE-2026-18839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an...

CVE-2024-28987 — Updated!

CVE-2024-28987 - SolarWinds Web Help Desk Hardcoded Credentials Exploit ⚠️ DISCLAIMER: This tool is for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal. Use this tool only on systems you own or have explicit permission to test. 📋...

MAL-2026-11877 Malicious code in @servicetitan/help-center (npm)

npm/@servicetitan/help-center is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

WordPress JS Help Desk plugin < 3.1.4 - Unauthenticated Arbitrary Ticket File Attachment Upload vulnerability

Unauthenticated Arbitrary Ticket File Attachment Upload vulnerability discovered by Shivamani Vastrala in WordPress Plugin JS Help Desk versions 3.1.4...

WordPress JS Help Desk plugin < 3.1.4 - Subscriber+ Sensitive Information Disclosure vulnerability

Subscriber+ Sensitive Information Disclosure vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin JS Help Desk versions 3.1.4...

`nx graph` dev server permissive CORS policy

Summary The local HTTP server started by nx graph sent Access-Control-Allow-Origin: on every response, letting any website a developer visited read the server's responses cross-origin — including the full project graph and the output of the /help endpoint, which runs a target's configured help...

EUVD-2026-39831

nx graph dev server permissive CORS policy...

GHSA-G2R8-WVMJ-JF5W `nx graph` dev server permissive CORS policy

Summary The local HTTP server started by nx graph sent Access-Control-Allow-Origin: on every response, letting any website a developer visited read the server's responses cross-origin — including the full project graph and the output of the /help endpoint, which runs a target's configured help...

Kwetsbaarheid verholpen in SolarWinds Web Help Desk

SolarWinds has identified a vulnerability in the SolarWinds Web Help Desk’s authentication mechanism. This vulnerability involves an attempt to bypass the authentication process using SAML 2.0. This issue occurs in systems where SAML authentication is enabled. An attacker can exploit this...

CVE-2026-14929

The JS Help Desk WordPress plugin before 3.1.4 does not verify ownership of the targeted reply before updating it, allowing any authenticated user Subscriber and above to overwrite the content of any support-ticket reply on the site...

CVE-2026-14928

The JS Help Desk WordPress plugin before 3.1.4 does not perform authorization or ownership checks before returning support-ticket content in a nonce-gated search handler, allowing any authenticated user Subscriber and above to read the subject and full message body of every other user's support...

CVE-2026-15209

The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the ticket being loaded: a low-privileged authenticated user can supply another user's ticket ID and read that ticket's contents, including the reporter's PII and message body...