18286 matches found
Malicious Package
Overview @afound/common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
📄 Django Summernote 0.8.20.0 Unrestricted File Upload Scanner
This Metasploit Auxiliary Scanner module detects unrestricted file upload vulnerabilities in django-summernote. It targets misconfigurations where image validation depends on the Pillow library and allows non-image files to be uploaded when Pillow is missing. The module safely scans common upload...
CVE-2020-7063
creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...
BELL-CVE-2026-23013
Bulletin has no description...
CVE-2026-24804: Loop with Unreachable Exit Condition
Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in coolsnowwolf lede package/lean/mt/drivers/mt7603e/src/mt7603wifi/common modules. This vulnerability is associated with program files bnlib.C. This issue affects lede: through r25.10.1...
The allocate_structures function insufficiently checks bounds before arithmetic multiplication
sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocatestructures contains a sizet overflow in sacommon.c. The allocatestructures function insufficiently checks bounds before arithmetic...
RHEL 9 : image-builder (RHSA-2026:1377)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:1377 advisory. A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes: golang:...
gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-24688 via pypdf (4.3.0)
pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-24688 Source advisory: OSV:GHSA-2Q4J-M29V-HQ73...
io.quarkus:quarkus-hibernate-reactive (>=2.2.0.cr1, <=2.4.0.cr1), io.quarkus:quarkus-hibernate-reactive-deployment (>=2.2.0.cr1, <=2.4.0.cr1) +4 more potentially affected by CVE-2025-14969 via org.hibernate.reactive:hibernate-reactive-core (1.0.0.cr9)
org.hibernate.reactive:hibernate-reactive-core MAVEN version 1.0.0.cr9 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate.reactive:hibernate-reactive-core and may be impacted: - io.quarkus:quarkus-hibernate-reactive =2.2.0.cr1, =2.2.0.cr1,...
io.quarkus:quarkus-hibernate-reactive (>=2.5.0.cr1, <=2.6.2.final), io.quarkus:quarkus-hibernate-reactive-deployment (>=2.5.0.cr1, <=2.6.2.final) +4 more potentially affected by CVE-2025-14969 via org.hibernate.reactive:hibernate-reactive-core (1.1.0.final)
org.hibernate.reactive:hibernate-reactive-core MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate.reactive:hibernate-reactive-core and may be impacted: - io.quarkus:quarkus-hibernate-reactive =2.5.0.cr1, =2.5.0.cr1,...
CVE-2025-59095
The program libraries DLL and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key cryptoKey to transform...
EUVD-2025-206357
The program libraries DLL and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key cryptoKey to transform...
openSUSE Security Advisory (SUSE-SU-2026:0231-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 8 : poppler (RHSA-2026:1091)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1091 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: Out-of-Bounds Read in...
CVE-2025-13920
creationtimestamp| type| source ---|---|--- 2026-01-24 15:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md6lhavi642c 2026-03-17 02:22:55+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-13920.yaml 2026-03-17...
kernel security update
An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
CVE-2026-0528 vulnerabilities
Vulnerabilities for packages: beats, cloudbeat-fips, apm-server-fips, cloudbeat, apm-server...
CVE-2026-23831 vulnerabilities
Vulnerabilities for packages: crossplane, tekton-chains, buildkitd, skaffold, tflint-fips, cloudbeat-fips, neuvector-sigstore-interface-fips, trivy-operator, zarf, skaffold-fips, falcoctl-fips, slsa-verifier, gh, flux-source-controller-fips, kyverno-notation-aws, kubescape, flux-source-controller...
comet-common (>=1.0.5, <=2.0.1), iconrpcserver (>=1.0.3, <=1.1.2.1) +2 more potentially affected by CVE-2026-0994 via protobuf (3.5.1)
protobuf PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - comet-common =1.0.5, =1.0.3, =1.1.2.1 - melon-music-player 3.0.0a0 - noquant-futu 5.10.2208 Source cves: CVE-2026-0994 Source advisory:...