144 matches found
CVE-2026-23885
Alchemy is an open source content management system engine written in Ruby on Rails. Prior to versions 7.4.12 and 8.0.3, the application uses the Ruby "eval" function to dynamically execute a string provided by the "resourcehandler.enginename" attribute in...
CVE-2026-23885
Alchemy is an open source content management system engine written in Ruby on Rails. Prior to versions 7.4.12 and 8.0.3, the application uses the Ruby eval function to dynamically execute a string provided by the resourcehandler.enginename attribute in Alchemy::ResourcesHelperresourceurlproxy. Th...
CVE-2026-23885: Improper Neutralization of Directives in Dynamically Evaluated Code
Alchemy is an open source content management system engine written in Ruby on Rails. Prior to versions 7.4.12 and 8.0.3, the application uses the Ruby eval function to dynamically execute a string provided by the resourcehandler.enginename attribute in Alchemy::ResourcesHelperresourceurlproxy. Th...
PT-2026-3507
Name of the Vulnerable Software and Affected Versions Alchemy versions prior to 7.4.12 Alchemy versions prior to 8.0.3 Description Alchemy, a Ruby on Rails content management system, allows an authenticated attacker to execute arbitrary system commands on the host operating system. The applicatio...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000729)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000729 advisory. Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entire...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001989)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001989 advisory. Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entire...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002410)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002410 advisory. Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entire...
EUVD-2001-0853
Malware in sbrugna...
EUVD-2001-0854
Malware in sbrugna...
EUVD-2025-29446
Malicious code in bioql PyPI...
EUVD-2023-0451
Malicious code in bioql PyPI...
MAL-2025-14275 Malicious code in alchemy-o0bup-rj9h1-drift-project (npm)
The package alchemy-o0bup-rj9h1-drift-project was found to contain malicious code...
MAL-2025-14272 Malicious code in alchemy-5iqmn-ac151-nymph-project (npm)
The package alchemy-5iqmn-ac151-nymph-project was found to contain malicious code...
MAL-2025-38488 Malicious code in vista-pvyte-je2v2-alchemy-project (npm)
The package vista-pvyte-je2v2-alchemy-project was found to contain malicious code...
MAL-2025-38613 Malicious code in vortex_qmviz_z8i7w_alchemy (npm)
The package vortexqmvizz8i7walchemy was found to contain malicious code...
MAL-2025-14271 Malicious code in alchemy-3k0rp-mvdxg-flora-project (npm)
The package alchemy-3k0rp-mvdxg-flora-project was found to contain malicious code...
MAL-2025-14273 Malicious code in alchemy-5p9dp-k62ml-zenith-project (npm)
The package alchemy-5p9dp-k62ml-zenith-project was found to contain malicious code...
MAL-2025-14277 Malicious code in alchemy-s89r2-1zvdy-lucid-project (npm)
The package alchemy-s89r2-1zvdy-lucid-project was found to contain malicious code...