MAL-2026-17335 Malicious code in @firelordzuka/pulse-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8247d4cb8f4973f229f36053baee4350a10058ec5290e6fad9659ebe1c04f8a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @firelordzuka/pulse-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8247d4cb8f4973f229f36053baee4350a10058ec5290e6fad9659ebe1c04f8a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17337 Malicious code in link-age-great (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9871d21579b06dadaa530e69ae728bae90420a0c9cfba6d798a43cc87795ed43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in link-status-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a885003c985463c91366a4a8615fab9c6e4d876afdf33493c3e0463066cbdd The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in link-age-great (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9871d21579b06dadaa530e69ae728bae90420a0c9cfba6d798a43cc87795ed43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17336 Malicious code in @redman89405/my-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7d38498dcd2e2a3afc4ed3b3a5136cb88e11693ef59fc7676bf35cd89b932c The package ships code.png alongside index.js and exports a function imageToCode that reads a length-prefixed byte stream from the first pixel row of...

Malicious code in @redman89405/my-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7d38498dcd2e2a3afc4ed3b3a5136cb88e11693ef59fc7676bf35cd89b932c The package ships code.png alongside index.js and exports a function imageToCode that reads a length-prefixed byte stream from the first pixel row of...

Malicious code in iban-validator-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fff3da0c4ead2e4f938efa16ad1cea92e872789a3b012edfed68526898cce4fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2026-103581

Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway affected versions not specified Description Kiteworks Email Protection Gateway failed to sufficiently restrict the assignment of certificates to accounts. This flaw allows an attacker to associate a certifica...

PT-2026-103115

MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints attribute add/edit, event edit, free-text import, sighting capture, shadow attribute proposal, event report creation, object reference add, user admin edit, the...

CVE-2026-103237: Authorization Bypass Through User-Controlled Key

MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints attribute add/edit, event edit, free-text import, sighting capture, shadow attribute proposal, event report creation, object reference add, user admin edit, the...

Linux USB solenoids yurex_probe Heap Buffer Overflow

The vulnerability of the yurexprobe function in the drivers/usb/misc/yurex.c module of the Linux device driver for USB devices relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...

edt-ft5x06 driver Heap Buffer Overflow DoS

The vulnerability of the edtft5x06tspreparedebugfs function in the drivers/input/touchscreen/edt-ft5x06.c driver for the touchscreen sensor in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise...

mac80211 Stack Use-After-Free

The vulnerability of the function ieee80211prepconnection in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel net/batman-adv/bat_iv_ogm.c Buffer Overflow DoS

The vulnerability of the batadvivogmsendtoif function in the net/batman-adv/bativogm.c module, which is part of the Linux kernel’s networking functions, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the irisreleaseinternalbuffers function in the drivers/media/platform/qcom/iris/irisbuffer.c driver for multimedia devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an...

Linux kernel OVPN TCP Socket Detach

The vulnerability of the ovpntcpsocketdetach function in the drivers/net/ovpn/tcp.c file of the Linux kernel’s network device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

Linux hardware monitoring driver pt5161l_read_block_data Heap Buffer Overflow

The vulnerability of the pt5161lreadblockdata function in the drivers/hwmon/pt5161l.c file of the Linux operating system’s device monitoring driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability coul...

Linux inet_csk_listen_stop Heap Buffer Overflow DoS

The vulnerability of the inetcsklistenstop function in the net/ipv4/inetconnectionsock.c module of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux device tree driver Heap Buffer Overflow DoS

The vulnerability of the testdrvprobe function in the drivers/of/unittest.c module of the device tree driver and kernel open-source software for Linux operating systems is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to...