CVE-2016-20093: Unquoted Search Path or Element

Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the WiseBootAssistant and SpyHunter 4 Service respectively, allowing local users to execute arbitrary code with SYSTEM privileges. Attackers can insert malicious executables in the system root path that...

org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.468)

org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...

org.jenkins-ci.main:jenkins-test-harness (1.596.3), org.jenkins-ci.main:jenkins-war (1.596.3) +4 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.596.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.596.3 - org.jenkins-ci.main:jenkins-war 1.596.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.596.3), org.jenkins-ci.main:jenkins-war (1.596.3) +4 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.596.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.596.3 - org.jenkins-ci.main:jenkins-war 1.596.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.596.3), org.jenkins-ci.main:jenkins-war (1.596.3) +4 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.596.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.596.3 - org.jenkins-ci.main:jenkins-war 1.596.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.642), org.jenkins-ci.main:jenkins-war (1.642) +6 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.642)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.642 - org.jenkins-ci.main:jenkins-war 1.642 -...

ca.islandora.alpaca:islandora-connector-broadcast (>=0.2.0, <=0.3.0), ca.islandora.alpaca:islandora-indexing-triplestore (0.1.0) +545 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (4.1.9.release)

org.springframework:spring-expression MAVEN version 4.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.islandora.alpaca:islandora-connector-broadcast =0.2.0, =1.0.0, =2.0.0-rc2,...

com.cognifide.aet:cleaner (>=2.0.0-rc2, <=2.1.6), com.cognifide.aet:communication (>=2.0.0-rc2, <=2.1.6) +189 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.1.9.release)

org.springframework:spring-webmvc MAVEN version 4.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.cognifide.aet:cleaner =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1,...

Malicious Package

Overview react-cleaner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

aidriver (0.1.0), lama-cleaner (>=0.18.0, <=0.23.0) +3 more potentially affected by CVE-2026-5241 via transformers (4.20.0)

transformers PYPI version 4.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aidriver 0.1.0 - lama-cleaner =0.18.0, =1.0.0, =2022.6.23, =2022.6.29.post2 Source cves: CVE-2026-5241 Source advisory:...

khoj-assistant (>=0.1.0, <=0.3.0a1676209086), lama-cleaner (>=0.24.0, <=0.29.1) +1 more potentially affected by CVE-2026-5241 via transformers (4.21.0)

transformers PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - khoj-assistant =0.1.0, =0.24.0, =0.29.1 - med-clip-weixiong 0.0.5 Source cves: CVE-2026-5241 Source advisory: OSV:GHSA-FGCW-684Q-JJ6R...

khoj-assistant (>=0.1.0, <=0.3.0a1676209086), lama-cleaner (>=0.24.0, <=0.29.1) +1 more potentially affected by CVE-2026-5241 via transformers (4.21.0)

transformers PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - khoj-assistant =0.1.0, =0.24.0, =0.29.1 - med-clip-weixiong 0.0.5 Source cves: CVE-2026-5241 Source advisory: OSV:PYSEC-2026-2290...

aidriver (0.1.0), lama-cleaner (>=0.18.0, <=0.23.0) +3 more potentially affected by CVE-2026-5241 via transformers (4.20.0)

transformers PYPI version 4.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aidriver 0.1.0 - lama-cleaner =0.18.0, =1.0.0, =2022.6.23, =2022.6.29.post2 Source cves: CVE-2026-5241 Source advisory:...

Your phone called. It needs a cleanup.

Does it sometimes take your phone a few minutes to accomplish one simple task? That can be wildly frustrating. But you’re in luck, because we’ve got a free tool that scans your phone for leftover files, temporary data, outdated caches and helps you clean up all that junk. Introducing our Junk...

n8n-MCP security vulnerability

n8n-MCP is a model context protocol server developed by Romuald Członkowski, an individual developer. Versions of n8n-MCP prior to 2.51.3 contained security vulnerabilities. These vulnerabilities stemmed from the fact that the workflow telemetry cleaner might retain fragments of URL shape node...

HAX security vulnerabilities

HAX is an open-source microsite managed using HAX+CMS with a PHP backend. Versions of HAX 26.0.0 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the /system/api/saveNode endpoint, which had a storage-oriented cross-site scripting vulnerability. Users with edit...

Tiny Technologies TinyMCE Cross-site Scripting Vulnerability

TinyMCE is a rich text editor developed by Tiny Technologies in the United States. Versions of TinyMCE from 6.8.0 to 7.1.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper handling of SVG namespace scopes by the cleaner tool; it could allow custom payloads...

khoj-assistant (>=0.1.0, <=0.3.0a1676209086), lama-cleaner (>=0.24.0, <=0.29.1) +1 more potentially affected by CVE-2026-4372 via transformers (4.21.0)

transformers PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - khoj-assistant =0.1.0, =0.24.0, =0.29.1 - med-clip-weixiong 0.0.5 Source cves: CVE-2026-4372 Source advisory: OSV:GHSA-29PF-2H5F-8G72...

aidriver (0.1.0), lama-cleaner (>=0.18.0, <=0.23.0) +3 more potentially affected by CVE-2026-4372 via transformers (4.20.0)

transformers PYPI version 4.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aidriver 0.1.0 - lama-cleaner =0.18.0, =1.0.0, =2022.6.23, =2022.6.29.post2 Source cves: CVE-2026-4372 Source advisory:...

MAL-2026-4791 Malicious code in react-cleaner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c3d7a072dc204b4c150fae46302a31dafd46c85518d4ba7128fc7d36bf6a53 [email protected] is a pino-logger impersonator package main is pino.js, homepage https://getpino.io, module layout mirrors pino's lib/ tree that, ...