Malicious code in @crysnovax/plug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b242d3d1fc217775fa550cf39213eba711b3fd758f5ac0f077a3a33af631eed9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-6471

creationtimestamp| type| source ---|---|--- 2026-09-04 12:12:46+00:00| seen| https://bsky.app/profile/devopsbriefly.bsky.social/post/3muowrtw6ak2d 2026-09-04 12:15:13+00:00| seen| https://bsky.app/profile/javascriptbriefly.bsky.social/post/3muowwa36x62s 2026-09-04 12:16:13+00:00| seen|...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Zimbra CVE-2026-73570 Incident Response Toolkit

Zimbra CVE-2026-73570 Incident Response Toolkit is a collection of detection and evidence-preservation utilities for administrators investigating suspected exploitation of CVE-2026-73570. The toolkit searches Zimbra and mail logs for exploitation indicators, examines JSP persistence locations,...

CVE-2026-17207: Out-of-bounds Write

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the xeeustallstreamclose function in the drivers/gpu/drm/xe/xeeustall.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-85754

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow...

Linux Netfilter Nat Functions Data Compromise

The vulnerabilities of the functions iptnatregisterlookups and iptnatunregisterlookups in the module net/ipv4/netfilter/iptablenat.c, as well as the functions ip6tnatregisterlookups and ip6tnatunregisterlookups in the module net/ipv6/netfilter/ip6tablenat.c, along with the functions nfnatregister...

Linux kernel IPv6 VTI Buffer Overflow

The vulnerability in the vti6tnllookup function within net/ipv6/ip6vti.c, which is part of the Linux kernel’s IPv6 implementation, stems from improper validation of unsafe input values. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality, integrity, and...

Linux net/tipc/msg.c Heap Buffer Overflow

The vulnerability of the tipcbufAppend function in the net/tipc/msg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kernel mailbox driver module Heap Buffer Overflow

The vulnerability of the mboxtestprobe function in the drivers/mailbox/mailbox-test.c file of the Linux kernel’s mailbox driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

NVIDIA Tegra Heap Buffer Overflow DoS

The vulnerability of the tegra124emcpreparetimingchange function in the drivers/memory/tegra/tegra124-emc.c module of the NVIDIA Tegra system controller driver is related to the use of an erroneous operator. Exploiting this vulnerability could allow a remote attacker to compromise the...

Linux kernel BPF Iteration Buffer Overflow DoS

The vulnerabilities of the functions bpfitertaskvmanew and bpfitertaskvmaDestroy in the kernel module bpf/taskiter.c of the Linux operating system are related to the reutilization of previously freed memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentialit...

Linux Kernel xsk_skb_metadata Buffer Overflow

The vulnerability of the xskskbmetadata function in the net/xdp/xsk.c module, which implements kernel networking functions in the Linux operating system, is related to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise t...

Linux SCTP Kernel Heap Buffer Overflow DoS

The vulnerability of the sctpunpackcookie function in the net/sctp/smmakechunk.c module of the Linux operating system’s SCTP protocol implementation is related to improper handling of length parameter mismatches. Exploiting this vulnerability allows a remote attacker to compromise the...

Linux kernel IPv4 DoS

The vulnerability in the reqskqueuehashreq function within net/ipv4/inetconnectionsock.c of the Linux kernel’s IPv4 implementation is related to improper memory deallocation. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality, integrity, and availabilit...

Linux kernel cgroup Heap Buffer Overflow DoS

The vulnerability of the pressurewrite function in the Linux kernel/cgroup/cgroup.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux kernel IVPU IPC Buffer Overflow DoS

The vulnerability in the ivpuipcreceive function within the drivers/accel/ivpu/ivpuipc.c file of the Linux kernel system is related to integer overflow or cyclic shift. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...

Linux kernel Networking Function Heap Buffer Overflow DoS

The vulnerability of the inputprocesspayload function in the net/xfrm/xfrmiptfs.c module, which is part of the networking functions in the Linux kernel, is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a remote attacker to...

Linux kernel vfiopci_core_close_device Heap Buffer Overflow DoS

The vulnerability of the vfiopcicoreclosedevice function in the drivers/vfio/pci/vfiopcicore.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...