autoreduce-frontend (>=22.0.0.dev22, <=22.0.0.dev23), django-rq-scheduler (2022.5.1) +4 more potentially affected by CVE-2026-15307 via django (4.0.4)

django PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev22, =0.0.17, =0.7.15, =0.7.23 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

autoreduce-frontend (>=22.0.0.dev12, <=22.0.0.dev13), djangodjangodjango (4.0.1) +4 more potentially affected by CVE-2026-15307 via django (4.0.1)

django PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev12, =0.0.3, =1.2.1 - railguns 0.53.0 - shaarpy 0.3.0 - vuln-repo 0.0.4 Source cves: CVE-2026-15307 Source advisory:...

autoreduce-db (22.0.0.dev37), autoreduce-frontend (22.0.0.dev24) +6 more potentially affected by CVE-2026-15307 via django (4.0.6)

django PYPI version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db 22.0.0.dev37 - autoreduce-frontend 22.0.0.dev24 - autoreduce-qp 22.0.0.dev38 - autoreduce-rest-api 22.0.0.dev23 - autoreduce-scripts...

autoreduce-db (>=0.1.0, <=22.0.0.dev1), autoreduce-frontend (>=21.1.1, <=21.1.3) +4 more potentially affected by CVE-2026-15307 via django (3.2.2)

django PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev0, =21.1.2, =21.1.4 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

autoreduce-frontend (>=22.0.0.dev12, <=22.0.0.dev13), djangodjangodjango (4.0.1) +4 more potentially affected by CVE-2026-15830 via django (4.0.1)

django PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev12, =0.0.3, =1.2.1 - railguns 0.53.0 - shaarpy 0.3.0 - vuln-repo 0.0.4 Source cves: CVE-2026-15830 Source advisory:...

autoreduce-frontend (>=22.0.0.dev22, <=22.0.0.dev23), django-rq-scheduler (2022.5.1) +4 more potentially affected by CVE-2026-15830 via django (4.0.4)

django PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev22, =0.0.17, =0.7.15, =0.7.23 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...

autoreduce-db (>=0.1.0, <=22.0.0.dev1), autoreduce-frontend (>=21.1.1, <=21.1.3) +4 more potentially affected by CVE-2026-15830 via django (3.2.2)

django PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-db =0.1.0, =21.1.1, =21.1.0, =22.0.0.dev0, =21.1.2, =21.1.4 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...

Argos — Updated!

Argos — Blockchain Asset Tracing Platform Argos is a multi-language blockchain investigation platform for tracing, analyzing, and visualizing fund flows on Ethereum and Bitcoin. Built with Rust, OCaml, and TypeScript/React. Architecture root@kitploit: +-----------------------+ | Frontend React 19...

MAL-2026-11976 Malicious code in native-frontend-orb (npm)

npm/native-frontend-orb is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished...

Malicious code in frontend-orb (npm)

npm/frontend-orb is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by the...

Malicious code in @servicetitan/micro-frontend (npm)

npm/@servicetitan/micro-frontend is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Starkiller v3.6.0

Starkiller Starkiller is a Frontend for Powershell Empire. It is a web application written in VueJS. If you'd like to contribute please follow the Contribution guide. If you'd like to request a feature or report a bug, please follow the Issue template. Getting Started As of Empire 5.0 and...

CVE-2026-16292

The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-metadata update actions, allowing an attacker to modify the metadata of a logged-in user's uploaded file via a CSRF attack, which can be leveraged to download that file. When guest...

CVE-2026-16292 Frontend File Manager Plugin <= 23.6 - File Metadata Update via CSRF

The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-metadata update actions, allowing an attacker to modify the metadata of a logged-in user's uploaded file via a CSRF attack, which can be leveraged to download that file. When guest...

CVE-2026-16292 Frontend File Manager Plugin <= 23.6 - File Metadata Update via CSRF

The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-metadata update actions, allowing an attacker to modify the metadata of a logged-in user's uploaded file via a CSRF attack, which can be leveraged to download that file. When guest...

WordPress Frontend File Manager Plugin plugin <= 23.6 - File Metadata Update vulnerability

File Metadata Update vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Frontend File Manager versions = 23.6...

CVE-2026-16292

The Frontend File Manager Plugin for WordPress (versions through 23.6 ) contains a vulnerability where it fails to perform nonce validation on specific file-metadata update actions. This oversight allows an attacker to perform a Cross-Site Request Forgery (CSRF) attack to modify the metadata of a...

CVE-2026-16292

The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-metadata update actions, allowing an attacker to modify the metadata of a logged-in user's uploaded file via a CSRF attack, which can be leveraged to download that file. When guest...

PT-2026-67108

Name of the Vulnerable Software and Affected Versions Frontend File Manager Plugin versions prior to 23.7 Description The plugin fails to perform nonce validation—a security measure used to protect against Cross-Site Request Forgery CSRF, where a user is tricked into executing unwanted actions—on...

CVE-2026-16292: Cross-Site Request Forgery (CSRF)

The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-metadata update actions, allowing an attacker to modify the metadata of a logged-in user's uploaded file via a CSRF attack, which can be leveraged to download that file. When guest...