CVE-2026-108160

The AstronRPA desktop client (versions through 1.1.6 ) is vulnerable to a download of code without integrity check (CWE-494). The electron-updater component fails to perform signature verification when fetching updates via a plain-HTTP feed . A network attacker positioned between the client and t...

CVE-2026-108160 AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed

AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's auto-update mechanism. Attackers positioned between the client and server can serve a malicious update manifest and...

EUVD-2026-95908

AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's auto-update mechanism. Attackers positioned between the client and server can serve a malicious update manifest and...

Malicious code in kmf-vendor-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ddc660098b1c73a1899ad3fe471b53ce562ca033669fa64622ff386d774129 package.json defines a postinstall script that invokes node -e to issue an HTTPS GET to the attacker-controlled out-of-band callback host...

EUVD-2026-95897

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the self-upgrade mechanism validates a downloaded binary only with a same-origin digest obtained from the same upgrade mirror. A compromised mirror or network attacker able to alter both responses can supply a...

Malicious code in @galicia-toolkit-nestjs/commons (npm)

Source: amazon-inspector eae27acb3901d275439e482d51a1451df67c1a6b2011f35881253a3fa8d2456b The package ships a tiny index.js that requires a bundled ELF at prebuilds/linux-x64/metrics.node inside a swallow-all try/catch on module load. No C/C++ source, binding.gyp, or node-gyp/prebuild tooling is...

Malicious code in @brick-v2/table (npm)

Source: amazon-inspector 1fdd2bc5b913543c62603b366fb4e1261407f63541e4b01ff7e0052e522523e0 @brick-v2/table presents a trivial Angular-style logger/table shim forRoot/createLogger/version no-ops while index.js unconditionally side-loads prebuilds/-/metrics.node on require. The native addon reads...

Malicious code in @brick-v2/form (npm)

Source: amazon-inspector 61727d51587469176de52cbc3c82a53b4572ecfc6c7f7b4c7edf534950b0f536 The package ships a tiny JavaScript stub at index.js that silently requires a compiled native addon at prebuilds/linux-x64/metrics.node inside a try/catch that suppresses errors. On load, the addon reads a...

CVE-2026-95702

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...

CVE-2026-78796

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file...

CVE-2026-108101

HortusFox hortusfox-web through 6.3 contains an unrestricted file upload vulnerability in PlantAttachmentModel that allows authenticated users to store files with client-supplied extensions under public/attachments/. Attackers can upload HTML or SVG files via /plants/attachments/add for stored...

CVE-2026-104081

KodExplorer before 4.55 contains a path traversal vulnerability in the unzipprename function within app/function/helper.function.php, where a single non-recursive strreplace sanitization pass can be bypassed using crafted filenames like "....//", combined with PclZip's extract call in...

CVE-2026-104082

SmarterMail before Build 9777 is vulnerable to Remote Code Execution (RCE) due to a bypass of the Volume Mount script-directory containment control . An attacker with a SysAdmin-scoped access token can provision a new mail domain via the domain-put endpoint, setting an arbitrary FileStore root pa...

EUVD-2026-95887

SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount script-directory containment control by provisioning a new mail domain with an arbitrary FileStore root path inside the trusted...

CVE-2026-108113

The ILIAS learning management system versions prior to 9.24, 10.12, and 11.5 are vulnerable to an unrestricted file upload vulnerability within the QTI question import image handling component (ilQtiMatImageSecurity ). Authenticated authors with question pool import rights can exploit this by imp...

EUVD-2026-95886

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling ilQtiMatImageSecurity that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htacces...

CVE-2026-107806 Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite

Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore. The restore flow trusts the supplied key,...

CVE-2026-107806

The Nginx UI web user interface (versions 2.3.8 until 2.5.0 ) is vulnerable to Remote Code Execution due to an insecure backup restoration flow. An authenticated administrator with an active secure session can submit attacker-controlled backup key material and a manifest via POST /api/restore . T...

CVE-2026-95702 Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...

CVE-2026-95702

A use-after-free vulnerability exists in the VFS component of Google gVisor prior to release 20260831.0 on all platforms. A local attacker with standard container privileges can achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay f...