20841 matches found
MAL-2026-10171 Malicious code in paysafe-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2877a8bf5626e24e7e65c02d1ba6d5f27be7d7367079e0e3065f95775e31f7f7 The package presents itself as a Node.js client for the Paysafe REST API but its main entry ships an XOR-obfuscated stealer. When any advertised SDK...
MAL-2026-10168 Malicious code in paysafe-fraud (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a596646a3604e01bef558573fc7199a2b9e9cc07ab7edae1b7e445d2e2b860b6 Package advertises itself as the 'Paysafe Fraud Prevention SDK' name paysafe-fraud, repo github.com/paysafe/paysafe-fraud but the exported...
MAL-2026-10169 Malicious code in paysafe-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dc1a7847e47ee850fe8a4011ce83950962ab65cc742eb52919d13abe431e59 [email protected] impersonates a Paysafe payments SDK package name, description "Paysafe JavaScript SDK", and repository URL...
MAL-2026-10167 Malicious code in paysafe-checkout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4db76c1b389e2c8d019eda8a0b6f3b8c28193fd3f9de4abe6234bab1e595e619 Package presents itself as a Paysafe Checkout SDK but is a credential-stealing lure. index.js defines a PaysafeClient with fake payments/customers AP...
MAL-2026-10166 Malicious code in paysafe-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce9ede35fc7679965ba83f58e829a328482bf1fbdb2e450d23e20bed24d708f The package presents itself as a Paysafe REST SDK PaysafeClient with payments and customers methods but the SDK methods are stubs that return...
RLSA-2026:37123 Important: podman security, bug fix, and enhancement update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted S...
cybersecurity-exam-report
Cybersecurity Exam Project: ProFTPD Exploitation and MySQL Dat...
CVE-2026-52910 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-W63P-JR39-2686 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F75R-XCG5-HGF3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X645-X4FH-PPH5 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-WH8G-JGHW-8946 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-8GMG-RGVJ-XVJJ vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7PQF-G2J2-J5X4 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-5XH4-H2PM-54MV vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-4HMJ-JQ37-HMF2 vulnerabilities
Vulnerabilities for packages: chromium...
SUSE CVE-2026-8927
When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests. Specifically, if the initial transfer authenticates against proxyA using Digest auth, a subsequent transfer routed...
RockyLinux 9 : podman (RLSA-2026:37123)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:37123 advisory. golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate CVE-2026-39835 golang.org/x/crypto/ssh:...
PT-2026-57194
Name of the Vulnerable Software and Affected Versions praisonaiagents versions prior to 1.6.78 Description An unsafe dynamic module loading issue exists in the AgentFlow. resolve pydantic class function. When a workflow step utilizes a string output pydantic reference, the framework imports a...
ROS-20260710-73-0006
The vulnerability of the Go programming language is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...