MAL-2026-15945 Malicious code in @crysnovax/baileys-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5170cdafff4affcf4669fed3b8df209d4c1f5305b368ef5e591b23035f3e041d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @crysnovax/plug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b242d3d1fc217775fa550cf39213eba711b3fd758f5ac0f077a3a33af631eed9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @crysnovax/baileys-stable

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-6471

creationtimestamp| type| source ---|---|--- 2026-09-04 12:12:46+00:00| seen| https://bsky.app/profile/devopsbriefly.bsky.social/post/3muowrtw6ak2d 2026-09-04 12:15:13+00:00| seen| https://bsky.app/profile/javascriptbriefly.bsky.social/post/3muowwa36x62s 2026-09-04 12:16:13+00:00| seen|...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Zimbra CVE-2026-73570 Incident Response Toolkit

Zimbra CVE-2026-73570 Incident Response Toolkit is a collection of detection and evidence-preservation utilities for administrators investigating suspected exploitation of CVE-2026-73570. The toolkit searches Zimbra and mail logs for exploitation indicators, examines JSP persistence locations,...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8714-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8714-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

CVE-2026-17207: Out-of-bounds Write

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow...

PT-2026-85754

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow...

Linux kernel get_ext_report() function Heap Buffer Overflow

The vulnerability of the getextreport function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux net/tipc/msg.c Heap Buffer Overflow

The vulnerability of the tipcbufAppend function in the net/tipc/msg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kernel BPF Iteration Buffer Overflow DoS

The vulnerabilities of the functions bpfitertaskvmanew and bpfitertaskvmaDestroy in the kernel module bpf/taskiter.c of the Linux operating system are related to the reutilization of previously freed memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentialit...

Linux net/ipv4/inet_fragment Heap Buffer Overflow DoS

The vulnerability of the inetfragqueueflush function in the net/ipv4/inetfragment.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

Linux kernel IVPU IPC Buffer Overflow DoS

The vulnerability in the ivpuipcreceive function within the drivers/accel/ivpu/ivpuipc.c file of the Linux kernel system is related to integer overflow or cyclic shift. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...

Linux kernel IPv6 VTI Buffer Overflow

The vulnerability in the vti6tnllookup function within net/ipv6/ip6vti.c, which is part of the Linux kernel’s IPv6 implementation, stems from improper validation of unsafe input values. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality, integrity, and...

Linux kernel vfiopci_core_close_device Heap Buffer Overflow DoS

The vulnerability of the vfiopcicoreclosedevice function in the drivers/vfio/pci/vfiopcicore.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel cgroup Heap Buffer Overflow DoS

The vulnerability of the pressurewrite function in the Linux kernel/cgroup/cgroup.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux Netfilter Nat Functions Data Compromise

The vulnerabilities of the functions iptnatregisterlookups and iptnatunregisterlookups in the module net/ipv4/netfilter/iptablenat.c, as well as the functions ip6tnatregisterlookups and ip6tnatunregisterlookups in the module net/ipv6/netfilter/ip6tablenat.c, along with the functions nfnatregister...

NVIDIA Tegra Heap Buffer Overflow DoS

The vulnerability of the tegra124emcpreparetimingchange function in the drivers/memory/tegra/tegra124-emc.c module of the NVIDIA Tegra system controller driver is related to the use of an erroneous operator. Exploiting this vulnerability could allow a remote attacker to compromise the...

Linux kernel InfiniBand driver Use-After-Free

The vulnerability in the isertloginrecvdone function within the drivers/infiniband/ulp/isert/ibisert.c file of the Linux kernel-based InfiniBand driver is related to improper assumptions regarding data or memory organization. Exploitation of this vulnerability may allow a remote attacker to...