MAL-2026-1671 Malicious code in chai-as-resolved (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f68c4df2837821306981ccb732721f9d6a1be9a7f096d6adc0ea53cd922bfe6 The package chai-as-resolved was found to contain malicious code...

MAL-2026-1672 Malicious code in chai-as-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 201c3097a1417370d6190e60489ac7894d63b574004eaa2b069958131ea2eda0 The package chai-as-sync was found to contain malicious code...

Malicious code in chai-as-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d21e75438243773776319743f074531328a3b7c3a72438ca9d3fdcc7c2adb74 The package chai-as-prop was found to contain malicious code...

MAL-2026-1670 Malicious code in chai-as-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d21e75438243773776319743f074531328a3b7c3a72438ca9d3fdcc7c2adb74 The package chai-as-prop was found to contain malicious code...

Malicious code in chai-as-prompt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b773fc994ff2fb27407b9ab4482deb4ab95bf5d772a226a80db73f0e0740b8b The package chai-as-prompt was found to contain malicious code...

MAL-2026-1669 Malicious code in chai-as-prompt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b773fc994ff2fb27407b9ab4482deb4ab95bf5d772a226a80db73f0e0740b8b The package chai-as-prompt was found to contain malicious code...

Malicious code in chai-as-produced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8741712e4e467670d7233e9312dc417f809f4f3d3af0a48d31a9693ad1391067 The package chai-as-produced was found to contain malicious code...

MAL-2026-1668 Malicious code in chai-as-produced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8741712e4e467670d7233e9312dc417f809f4f3d3af0a48d31a9693ad1391067 The package chai-as-produced was found to contain malicious code...

The vulnerability of the as_wazuh_object() function on the security monitoring and threat detection platform Wazuh allows a perpetrator to execute arbitrary code.

The vulnerability of the aswazuhobject function on the security monitoring and threat detection platform Wazuh is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with root privileges by...

Getting Roasted? Trellix Helix sees through AS-REP Attack

Getting Roasted? Trellix Helix sees through AS-REP Attack By Adithya Chandra and Maulik Maheta · March 17, 2026 Executive summary Threat actors regularly target Active Directory environments, continuously refining their toolsets and modifying attack frameworks to bypass security controls. However...

Getting Roasted? Trellix Helix sees through AS-REP Attack

Getting Roasted? Trellix Helix sees through AS-REP Attack By Adithya Chandra and Maulik Maheta · March 17, 2026 Executive summary Threat actors regularly target Active Directory environments, continuously refining their toolsets and modifying attack frameworks to bypass security controls. However...

CVE-2026-30707

An issue was discovered in SpeedExam Online Examination System SaaS after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and invoke this method directly to retrieve the full answer key. The...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the Unmarshal, UnmarshalAsMap, UnmarshalAsArray, and Marshal functions, which invoke Decode. An attacker can cause a panic with truncated fixext data that triggers an out-of-bounds read. Note: This vulnerability i...

CVE-2026-32263 Craft CMS vulnerable to behavior injection RCE via EntryTypesController

Craft CMS is a content management system CMS. From version 5.6.0 to before version 5.9.11, in src/controllers/EntryTypesController.php, the $settings array from parsestr is passed directly to Craft::configure without Component::cleanseConfig. This allows injecting Yii2 behavior/event handlers via...

CVE-2016-20031

ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp method which treats IPv6 loopback address...

PT-2026-25804

Name of the Vulnerable Software and Affected Versions Craft CMS versions 5.6.0 through 5.9.10 Description Craft CMS is a content management system. A flaw exists where the $settings array from parse str is passed directly to Craft::configure without proper sanitization using...

CVE-2016-20031 ZKTeco ZKBioSecurity 3.0 Local Authorization Bypass via visLogin.jsp

ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp method which treats IPv6 loopback address...

CVE-2016-20031 ZKTeco ZKBioSecurity 3.0 Local Authorization Bypass via visLogin.jsp

ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp method which treats IPv6 loopback address...

CVE-2016-20031

ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp method which treats IPv6 loopback address...

EUVD-2026-12176

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, in multi-user mode, AnythingLLM blocks suspended users on the normal JWT-backed session path, but it does not block them on the browser extension API...