MAL-2026-15944 Malicious code in @crysnovax/baileys-fixed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bca343c567c4a163c81912649019e99d22070a069b1c7e174a16659f6e41469 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

bash-4.3-fixed-CVE-2014-6271

Introduction This is GNU Bash, version 4.3. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...

EUVD-2026-70922

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery SSRF. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

CVE-2026-85148 Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts...

EUVD-2026-70870

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts...

EUVD-2026-70786

MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffers using sprintf without length validation. Attackers can supply arbitrarily long MOOS identifiers that overflow the...

CVE-2026-85452

MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffers using sprintf without length validation. Attackers can supply arbitrarily long MOOS identifiers that overflow the...

GHSA-3MP7-4RH5-JRV9 SiYuan: Localhost-trust admin bypass on auth-code-gated endpoints, with potential remote reachability via the fixed-port proxy

CVE: This vulnerability corresponds to CVE-2026-72809. Summary The kernel's CheckAuth grants RoleAdministrator to any request whose RemoteAddr is loopback 127.0.0.1, for a specific set of endpoints, and these localhost bypasses sit outside the accessAuthCode gate so they apply even when an access...

ROOT-APP-MAVEN-CVE-2026-45674 CVE-2026-45674 in io.netty:netty-resolver-dns - Patched by Root

Root has patched CVE-2026-45674 in the io.netty:netty-resolver-dns package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-47691 CVE-2026-47691 in io.netty:netty-resolver-dns - Patched by Root

Root has patched CVE-2026-47691 in the io.netty:netty-resolver-dns package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-42587 CVE-2026-42587 in io.netty:netty-codec-http - Patched by Root

Root has patched CVE-2026-42587 in the io.netty:netty-codec-http package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-48043 CVE-2026-48043 in io.netty:netty-codec-http2 - Patched by Root

Root has patched CVE-2026-48043 in the io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-42583 CVE-2026-42583 in io.netty:netty-codec - Patched by Root

Root has patched CVE-2026-42583 in the io.netty:netty-codec package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-33871 CVE-2026-33871 in io.netty:netty-codec-http2 - Patched by Root

Root has patched CVE-2026-33871 in the io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-50020 CVE-2026-50020 in io.netty:netty-codec-http - Patched by Root

Root has patched CVE-2026-50020 in the io.netty:netty-codec-http package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-45673 CVE-2026-45673 in io.netty:netty-resolver-dns - Patched by Root

Root has patched CVE-2026-45673 in the io.netty:netty-resolver-dns package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-52999 CVE-2025-52999 in com.fasterxml.jackson.core:jackson-core - Patched by Root

Root has patched CVE-2025-52999 in the com.fasterxml.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-GHSA-72HV-8253-57QQ GHSA-72hv-8253-57qq in com.fasterxml.jackson.core:jackson-core - Patched by Root

Root has patched GHSA-72hv-8253-57qq in the com.fasterxml.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-55470 CVE-2026-55470 in ca.uhn.hapi.fhir:org.hl7.fhir.validation - Patched by Root

Root has patched CVE-2026-55470 in the ca.uhn.hapi.fhir:org.hl7.fhir.validation package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-33180 CVE-2026-33180 in ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root

Root has patched CVE-2026-33180 in the ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...