logitech-ipc-protocol

protocolo-ipc-de-logitech Documentación con ingeniería inversa del protocolo IPC del agente Logi Options+. Permite el control programático de dispositivos Logitech multi-host cambio de host, consultas de dispositivos sin acceso HID en bruto, tanto en macOS como en Windows. El protocolo no había...

CVE-2026-10520

CVE-2026-10520 Ivanti Sentry anteriormente MobileIron Sentry es una puerta de enlace de seguridad empresarial que actúa como proxy del tráfico entre dispositivos móviles y los recursos backend corporativos: correo electrónico, SharePoint y aplicaciones web internas. Aplica políticas de Mobile...

CVE-2026-81930 Apache Airflow Snowflake provider: Unvalidated account field redirects SQL API bearer token off-domain

Apache Airflow's Snowflake provider did not validate the connection's account and region fields before interpolating them into request URLs. The SQL API endpoint is built as https://account.snowflakecomputing.com/api/v2/statements, so an account value containing /, ? or demotes the intended domai...

CVE-2026-81930

The Apache Airflow Snowflake provider fails to validate the account and region fields before interpolating them into request URLs. An attacker can provide values containing /, ?, or # to demote the intended domain to a path, query, or fragment, allowing them to control the request host. This enab...

EUVD-2026-88696

Apache Airflow's Snowflake provider did not validate the connection's account and region fields before interpolating them into request URLs. The SQL API endpoint is built as https://account.snowflakecomputing.com/api/v2/statements, so an account value containing /, ? or demotes the intended domai...

CVE-2026-19397

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...

EUVD-2026-72612

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...

CVE-2026-19397

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...

CVE-2026-19397

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...

PT-2026-86974

Name of the Vulnerable Software and Affected Versions ASUS Control Center Express Agent affected versions not specified Description Missing authentication for a critical function allows an unauthenticated nearby user to achieve remote code execution and control the host via a direct connection to...

CVE-2026-19397: Missing Authentication for Critical Function

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...

Malicious code in btree-range-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7b5c5ccd56296e8ac25007af040c62f078c5953946fdae9fc1c67b0178f65f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14743 Malicious code in 3layerdipstackesp1lb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd59b0798d5b504ce5bc151f4b845c732a5cbf45d046f54b3becbffd944cd38 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackmu4bxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f47ca8b0e44e671faadd3d15253f3396ba78877392e9d4612cbe9d0e803cae The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14980 Malicious code in 3layerdipstackx70bgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862bd96242c9d0881543b13e5ff9672746a58a65da28390ab3741ea3a72a5bd3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackr7ib9k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e700d8fdf8a230a433bbf1fc3084c4a823335f7fbf4b2bca2ab54595564deed The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14643 Malicious code in 3layerdipstack6jqkjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3282758727328d8477c022b3347d6a69f149c13a840749cbd71039d28b7aeeb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackk5ewlo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be1dcacd3491d48fd7d39459b01ebcd86aca30f25b13b54f663f6229039f70f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14854 Malicious code in 3layerdipstackobk93q (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f10fd4f721af0eac918746c4dcde96ec112c5c7676c3a851cccf71c9f1e378 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-16933 Power System Integer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 through OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker...