77967 matches found
Malicious Package
Overview statist-browser-typed-client-sme.platform.web.productsnavigation.events is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...
Malicious Package
Overview tinkoff-statist-browser-typed-client-investing.product.pulse is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
BIT-VALKEY-2026-56684 Valkey: TLS pending-data processing use-after-free may allow remote code execution
Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...
CVE-2026-78203 Ghostwriter before 7.1.2 Cross-Client Report Template Disclosure via Unauthorized Template Swap
Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports. Attackers can exploit sequential template primary keys to enumerate and attach foreign templates, then...
CVE-2026-78203 Ghostwriter before 7.1.2 Cross-Client Report Template Disclosure via Unauthorized Template Swap
Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports. Attackers can exploit sequential template primary keys to enumerate and attach foreign templates, then...
CVE-2026-78203 Ghostwriter before 7.1.2 Cross-Client Report Template Disclosure via Unauthorized Template Swap
Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports. Attackers can exploit sequential template primary keys to enumerate and attach foreign templates, then...
CVE-2026-63693: Creation of Temporary File in Directory with Insecure Permissions
Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...
CVE-2026-77995: Authorization Bypass Through User-Controlled Key
Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0, OAuth Single Sign-On – OIDC SSO 1.2.2, Login with Keycloak OAuth Single Sign-On SSO 1.2.2, Single Sign-On for Educational Institutes 1.2.2 - The manipulation of a cookie value allows actors to login a...
CVE-2026-59567: Improper Handling of Insufficient Permissions or Privileges
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...
CVE-2026-59566: Improper Handling of Values
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...
CVE-2026-59564: Missing Critical Step in Authentication
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal...
CVE-2026-78417: Insufficient Verification of Data Authenticity
Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, allows an on-path attacker to intercept and tamper with VNC sessions via automatic acceptance of the server's RSA key during RSA-AES...
CVE-2026-59565: Improper Handling of Values
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows...
Thunderbird Heap Buffer Overflow DoS
The vulnerability of the Thunderbird email client relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
PT-2026-80886
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description Multiple issues allow local privilege escalation, enabling an unprivileged user to execute arbitrary code within a privileged context. Recommendations At the moment, there is...
PT-2026-80858
Name of the Vulnerable Software and Affected Versions miniOrange OAuth Client versions prior to 3.2.0 Description An issue in the miniOrange OAuth Client extension for Joomla allows an attacker to log in as any account, including administrators, without requiring a valid account or prior...
PT-2026-80885
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Android and ChromeOS affected versions not specified Description A locally exploitable buffer overflow bug allows a local attacker to cause a denial-of-service attack. A buffer overflow occurs when a program writes...
PT-2026-80887
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description Remote code execution flaws allow an unauthenticated and unprivileged user to execute arbitrary code within the ZCC context. This issue affects Windows, macOS, and mobile...
ROS-20260824-73-0010
The vulnerability of the rpcclientrecvfragment function in the libfreerdp/core/gateway/rpcclient.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service failures and execute arbitrary code...