Gladinet CentreStack & Triofox - Hardcoded Credentials

Gladinet CentreStack and Triofox 16.12.10420.56791 contain a hardcoded credentials vulnerability caused by use of hardcoded AES cryptoscheme values, letting attackers perform arbitrary local file inclusion without authentication, potentially leading to full system compromise. id: CVE-2025-14611...

MAL-2026-714 Malicious code in reactt-sdkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1040004e57d22b532a81d886c4a8d7847ea79a24950a31bc092da3f8ff0e46b The package reactt-sdkk was found to contain malicious code. Source: ghsa-malware 56b1676235be8d72d317cee06957d2c7c8b4a3e8fd215927e13b76fdcfe44384 An...

FUXA allows Remote Code Execution (RCE) via the project import functionality.

FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...

Malicious code in @ikeacnalan/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69aa8245ea172b28e43591f47b972fc5e5901c90a4154f6b5962f7a9a3a2e844 The package @ikeacnalan/icons was found to contain malicious code. Source: ghsa-malware...

MAL-2026-675 Malicious code in supun-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a334e071b736bf620c4a29e4ec2bbaaf59bc6c3d3ab7b44603e19e9a8d95d8e9 The package supun-baileys was found to contain malicious code. Source: ghsa-malware 43ec7bfea6bfa4e623dfafee2f6f8843915886935b0d44ad5d6de4b52f72cb41...

EUVD-2025-206715

FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...

CVE-2025-69983

FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...

CVE-2025-69983

FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...

Malicious code in chai-async-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe54f3f00b12c9b57fd672be7ddbe4a46342c24fe308c31f31c6156ae436d8b The package chai-async-tests was found to contain malicious code. Source: ghsa-malware 4303ac7ff339f51dfbc53ed8c70cd02a76123b62e0448bca935128fd313ab3...

MAL-2026-545 Malicious code in testxhjhka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa2b3af066bd5f02846fff50e2189f8c3a55cb62f71dd6835f4a999cd7dab42 The package testxhjhka was found to contain malicious code. Source: ghsa-malware 0552fa210ad2b24b0f9caf718edc7aed87d7cd7c610f380cf5348bd31b2fad70 Any...

MAL-2026-539 Malicious code in n8n-nodes-gg-udhasudsh-hgjkhg-official (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f177f9d8bad0a259983bc9f3e0880c59ee120b1e686e3f10b490ab0527beec3 The package n8n-nodes-gg-udhasudsh-hgjkhg-official was found to contain malicious code. Source: ghsa-malware...

Malicious code in n8n-nodes-gasdhgfuy-rejerw-ytjsadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e080478bd45e69f6daa0a8af616a71d7c1461853f41a3820e574459d96a7294a The package n8n-nodes-gasdhgfuy-rejerw-ytjsadx was found to contain malicious code. Source: ghsa-malware...

PT-2026-4533

Name of the Vulnerable Software and Affected Versions Sourcecodester Modern Image Gallery App version 1.0 Description A Remote Code Execution RCE issue exists in the gallery/upload.php component of the application. The application does not properly validate uploaded file contents and preserves...

CVE-2026-23755

D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious...

CVE-2026-23755

D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious...

MAL-2026-433 Malicious code in wallet-adapter-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd2a29de3dd67bd591f660c8b964bc262ba1967f0338d11a9e015ee04448c87 The package wallet-adapter-react was found to contain malicious code. Source: ghsa-malware...

MAL-2026-379 Malicious code in @joaoxxx/internallib-v325 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9c573db1b523cb0082a05f37710f4084f5ed28324fbe23186a7ebf9a0a082d The package @joaoxxx/internallib-v325 was found to contain malicious code. Source: ghsa-malware...

Malicious code in @joaoxxx/internallib-v325 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9c573db1b523cb0082a05f37710f4084f5ed28324fbe23186a7ebf9a0a082d The package @joaoxxx/internallib-v325 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-391 Malicious code in internallib_v962 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9664f22a915362fceed28ec2e15ea4bfbc16dbdd91cb358cba05ef247fec36a5 The package internallibv962 was found to contain malicious code. Source: ghsa-malware 1e08ba6555343cafd51a03a186572eaf33065999ee721770a8d507645826dfd...

PT-2026-3843

D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious...