9048 matches found
Important: Red Hat Security Advisory: Updated discovery-cli release RPM versions 2.4.3
Updated Discovery Release RPM 2.4.3 for discovery-cli dsc is now available for Discovery 2.4. New 2.4.3 version of discovery-cli dsc is now available for Discovery 2.4. This version contains a fix for CVE-2026-24049...
RHEL 10 / 8 / 9 : Updated discovery-cli RPM versions 2.4.3 (Important) (RHSA-2026:2823)
The remote Redhat Enterprise Linux 10 / 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:2823 advisory. New 2.4.3 version of discovery-cli dsc is now available for Discovery 2.4. This version contains a fix for CVE-2026-24049 . Tenable has...
EFM iptime A6004MX 代码问题漏洞
EFM iptime A6004MX is a wireless router produced by the South Korean company EFM. The EFM iptime A6004MX version 14.18.2 has a code vulnerability. This vulnerability stems from an unlimited upload function in the commitvpnclifile Upload function located in the cgi/timepro.cgi file, which could le...
GHSA-QHP6-6P8P-2RQH Wildfly Elytron integration susceptible to brute force attacks via CLI
Impact A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI. Patches The default behaviour has been changed in...
CVE-2026-26029
sf-mcp-server is an implementation of Salesforce MCP server for Claude for Desktop. A command injection vulnerability exists in sf-mcp-server due to unsafe use of childprocess.exec when constructing Salesforce CLI commands with user-controlled input. Successful exploitation allows attackers to...
`sha-rst` was removed from crates.io for malicious code
This crate was used as a dependency by finchclirust and finch-rst and contained a malware payload to exfiltrate credentials. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 22 times. Other than the other crates above that were part of the attack, no other crates...
GHSA-6V2J-VR4H-F632 `finch_cli_rust` was removed from crates.io for malicious code
This attempts to typosquat the existing crate finchcli to steal credentials from local files. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 18 times. There were no crates depending on this crate on crates.io. Thanks to Matthias Zepper of NGI Sweden for reportin...
CVE-2026-26014 vulnerabilities
Vulnerabilities for packages: rke2-runtime, livekit-egress, kubo, livekit-server, livekit-server-fips, k3s, kubo-fips, ipfs-cluster, op-geth, spegel, telegraf, spegel-fips, ipfs-cluster-fips, rke2-runtime-fips, livekit-cli...
Malicious Package
Overview node-dotenv-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-853 Malicious code in node-dotenv-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b47bebee6a74c00d3be10fad072e05074a62b29205377f682463290bad39c3 The package node-dotenv-cli was found to contain malicious code. Source: ghsa-malware 5bb66069e2bde985ae448962eaaf6373cd54aa2cd51fb20a0fef26ecb5dee2d...
Malicious code in node-dotenv-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b47bebee6a74c00d3be10fad072e05074a62b29205377f682463290bad39c3 The package node-dotenv-cli was found to contain malicious code. Source: ghsa-malware 5bb66069e2bde985ae448962eaaf6373cd54aa2cd51fb20a0fef26ecb5dee2d...
CVE-2026-25918
unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...
[SECURITY] Fedora 42 Update: rust-oo7-cli-0.3.3-5.fc42
System keyring access from the terminal...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: atlantis, ipfs-cluster, gomplate, spqr, kubevela, consul-k8s, kubernetes, cilium-cli, fulcio, external-dns, aws-flb-cloudwatch, ferretdb, metacontroller, witness, openbao, ingress-nginx-controller, step-issuer, kwok, pdfcpu, gitlab-runner, litestream, sonobuoy,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: atlantis, ipfs-cluster, gomplate, spqr, kubevela, consul-k8s, kubernetes, cilium-cli, fulcio, mockgen, external-dns, aws-flb-cloudwatch, ferretdb, metacontroller, witness, openbao, ingress-nginx-controller, step-issuer, kwok, pdfcpu, gitlab-runner, litestream,...
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, terraform-provider-azapi-fips, wavefront-collector-for-kubernetes, terraform-provider-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, bazelisk, docker-credential-acr-env-fips, timestamp-authority, ytt, hubble-ui-backend-fips,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, terraform-provider-azapi-fips, wavefront-collector-for-kubernetes, terraform-provider-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, bazelisk, docker-credential-acr-env-fips, timestamp-authority, ytt, hubble-ui-backend-fips,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, terraform-provider-azapi-fips, wavefront-collector-for-kubernetes, terraform-provider-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, bazelisk, docker-credential-acr-env-fips, timestamp-authority, ytt, hubble-ui-backend-fips,...