11457 matches found
PT-2026-90259
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the sunrpc component. The mount-event path in the rpc clnt handle event function calls rpc setup pipedir sb directly without refreshing the clnt-pipefs s...
Microsoft Edge (Chromium) < 152.0.4191.66 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 152.0.4191.66. It is, therefore, affected by multiple vulnerabilities as referenced in the September 11, 2026 advisory. - Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/prefix_sid.go file of the SRv6 L3 Service protocol for the border gateway GoBGP allows a attacker to cause a service failure.
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/prefixsid.go file of the SRv6 L3 Service protocol for the GoBGP edge gateway is related to improper resource cleanup or release. Exploiting this vulnerability could allow a malicious actor to cause service failure...
MAL-2026-16123 Malicious code in pinochiomathm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135c673bb3925502b10f92d9819d956004ade25faa9c358f6d3fb2c67cd6114e The package impersonates picomatch name 'pinochiomathm', description copied from picomatch, homepage pointing at github.com/micromatch/picomach. On...
CVE-2026-88860 Capgo Authorization Bypass via Stale Channel Permission Overrides
Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving stale overrides active. Attackers can retain channel-specific permissions after their base RBAC access has been revoked to perform unauthorized actions like changing production OT...
TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
PT-2026-89483
TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability...
Malicious code in server-authorized-cleanup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba50dd2c597a65e5fa5bd8aa2675ac16fb443c6d42381921fde160c9596f44d2 server-authorized-cleanup exposes triggerCleanup which issues an HTTPS GET to the hardcoded author endpoint...
MAL-2026-16079 Malicious code in server-authorized-cleanup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba50dd2c597a65e5fa5bd8aa2675ac16fb443c6d42381921fde160c9596f44d2 server-authorized-cleanup exposes triggerCleanup which issues an HTTPS GET to the hardcoded author endpoint...
MAL-2026-16078 Malicious code in cache-cleanup-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2931c2feef07a63612b0886a1840e519516424af0fbf4fb0a138e97736a18857 cache-cleanup-module ships an exported runOperation that queries a hardcoded third-party endpoint at https://testback-2aqe.onrender.com/can-cleanup...
Malicious code in cache-cleanup-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2931c2feef07a63612b0886a1840e519516424af0fbf4fb0a138e97736a18857 cache-cleanup-module ships an exported runOperation that queries a hardcoded third-party endpoint at https://testback-2aqe.onrender.com/can-cleanup...
Malicious Package
Overview server-authorized-cleanup is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instance...
Malicious Package
Overview cache-cleanup-module is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of...
CVE-2026-87446
A flaw was found in Google Chrome Extensions. This incomplete cleanup vulnerability allows a remote attacker, by leveraging social engineering, to install a crafted Chrome extension. This could lead to a bypass of system access restrictions...
DEBIAN-CVE-2026-87549
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87549
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87446
Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87549
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87446
Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87446
Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...