24723 matches found
CVE-2026-53976 OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameter
OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the allowOutsideWorkspace=true query parameter alongside an absolute path, bypassi...
Malicious code in @holocronlab/botruntime-runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad15bd6ba410e0c0ca88ac22f1632a4b6707c4c66396c49c0ba90f906b19ae33 The package is published as a runtime for 'brt-built botruntime agents' and its client.d.ts describes the exported client as 'the authenticated...
MAL-2026-13420 Malicious code in @innocarpe/deepseek-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecff1188eb08eef1faffb2e898fe393c3311abdf5e96f041435a5ca12163dc67 The npm package's postinstall script scripts/postinstall.js requires childprocess and issues POST requests carrying environment and host identifier...
Malicious code in @innocarpe/deepseek-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecff1188eb08eef1faffb2e898fe393c3311abdf5e96f041435a5ca12163dc67 The npm package's postinstall script scripts/postinstall.js requires childprocess and issues POST requests carrying environment and host identifier...
Malicious code in typst-resume-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104d03639d9a9d48d03641fef83163391bb1540c8a01c56287bcaf8ca45ad01c index.js loads https, http, and childprocess at the top of the module and sends host/environment data to a hardcoded AWS Lambda URL at...
MAL-2026-13425 Malicious code in typst-resume-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104d03639d9a9d48d03641fef83163391bb1540c8a01c56287bcaf8ca45ad01c index.js loads https, http, and childprocess at the top of the module and sends host/environment data to a hardcoded AWS Lambda URL at...
post-exploitation-enumeration
Metasploitable2 – Post-Exploitation Enumeration Manual & Auto...
CVE-2026-64595
In the Linux kernel, the following vulnerability has been resolved: HID: hid-lenovo-go: cancel cfgsetup work in hidgocfgremove hidgocfgprobe initialises drvdata.gocfgsetup and schedules it to run 2 ms later: INITDELAYEDWORK&drvdata.gocfgsetup, &cfgsetup; scheduledelayedwork&drvdata.gocfgsetup,...
Exploit for Improper Authentication in Openprinting Cups
cve-id Donate Support the maintenance of this project wit...
PT-2026-68615
Name of the Vulnerable Software and Affected Versions NocteDefensor LudusMCP versions prior to 1.0.25 Description A path traversal issue exists within the ludus environment guides search component, specifically in a function located in the src/tools/ludusEnvironmentGuidesSearch.ts file. This occu...
GHSA-PGP5-M32W-57XP vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-Q7GJ-PJ54-2G7F vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-JQ5X-VMQ8-3QR5 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-4H42-5QRH-HRMP vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7M8X-RGJH-8GVW vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-8P2G-MP84-GMVM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-W9VW-56MM-F3QR vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-XQVM-PRP8-CC3X vulnerabilities
Vulnerabilities for packages: chromium...