PT-2026-64874

Name of the Vulnerable Software and Affected Versions ZTE File Manager affected versions not specified Description The zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity activity is intended to preview compressed files. Third-party applications can launch this activity and provide arbitrary fi...

Malicious code in @ks-radar/radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24bbd0f16f929682cd413abde1e40578db9fa5b2ad8cb7cdc9927c70f5f5f710 The OpenSSF Package Analysis project identified '@ks-radar/radar' @ 22.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in swiper_angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 474db4780bfc49ff2146966bdd508c123baf4d39c636e27aaba1996a0016d8f6 The OpenSSF Package Analysis project identified 'swiperangular' @ 5.9999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in identityscimapiserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c77102d108de4236b5ff8d121143aaa19efde51a10e4f63a6f79ad2dc982c34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11061 Malicious code in identityscimapiserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c77102d108de4236b5ff8d121143aaa19efde51a10e4f63a6f79ad2dc982c34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11057 Malicious code in merchantprefsservice-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cb0650e6084dbdffdf3011ee427b9997afa2ff2778d43e5e7929945cd14f54a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gpaas-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04c01a5b087d1c4d6ae8700fd1fee92cdb45c5a77f59a62723b17b5aa43e7f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11055 Malicious code in fundraiserservicepp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cefb4588a67439c112176df4b9af71d40a1e2a12e0bf81ef200affa79e0cb0e0 The OpenSSF Package Analysis project identified 'fundraiserservicepp' @ 1.5.0 npm as malicious. It is considered malicious because: - The packag...

CVE-2026-15704

creationtimestamp| type| source ---|---|--- 2026-07-24 08:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrewjtdsfk2r 2026-07-24 09:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116974133641581836 2026-07-24 09:00:34+00:00| seen|...

CVE-2026-35425

creationtimestamp| type| source ---|---|--- 2026-07-24 02:24:15+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrecct4rwg2u 2026-07-24 02:25:14+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrecelihhx2m 2026-07-24 02:25:16+00:00| seen|...

CVE-2026-64810

In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking...

EUVD-2026-48235

In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking...

CVE-2026-64810

JetBrains IntelliJ IDEA versions prior to 2026.2 are affected by an HTML injection vulnerability in an IDE notification, enabling silent user activity tracking. The issue is described across CVE-2026-64810 records (NVD and CVE listings) with a CVSS 3.1 Base Score of 4.3 (Medium) and user interact...

CVE-2026-65512

CVE-2026-65512 affects the WordPress WP Activity Log plugin (WordPress)

EUVD-2026-48118

Unauthenticated Cross Site Request Forgery CSRF in WP Activity Log = 5.6.4 versions...

UBUNTU-CVE-2026-13061

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...

EUVD-2026-47800

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...

CVE-2026-13061

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...

CVE-2026-13061 Improper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...

Improper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...