52 matches found
MAL-2026-14774 Malicious code in 3layerdipstackhr3ocw (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7f5462a6cad4608977cbf01ae1fab24a1257afe36d254ce404ca49b5aab99c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14670 Malicious code in 3layerdipstack97rmzr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13188e2cc25d797008ddcbc32e1f27d89e1c3de6f64ff67b9c5e021f2ac1e7c3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in 3layerdipstackuu02ly (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0ad67d22040139dc128f8a320d0b95d67571f954898946065369d705b89550 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14729 Malicious code in 3layerdipstackds3oln (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1497135f91ba31b1cc557c7a3b42aa6fdb7baf359f42a12d64ba790205f024 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14830 Malicious code in 3layerdipstackmiputn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56e30fdaec0a29e17b8585f734b0f1bce4c113fee11313a7b2ae9f775053cda The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in 3layerdipstackyqrxdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4a1b449e872d6368112e9ea9d653e7919c643eac89dfeb4a86f58468134df8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14810 Malicious code in 3layerdipstackl21ibf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc6ccc6467814c4ddf095d64904d3b0d2f475dbcd599ddcf02f43329cbdbf49 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Security Bulletin: This Power System update is being released to address CVE-2026-17429
Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can write arbitrary data to hardware control registers, allowing full control over the host system and all hosted...
EUVD-2026-62685
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with...
CVE-2026-47135
A flaw was found in vm2, an open-source virtual machine VM sandbox for Node.js. An attacker within the sandbox could exploit incomplete symbol interception and missing security checks to gain control over the host system. This could allow the attacker to execute arbitrary code outside the sandbox...
Fleet Access Control Error Vulnerability (CNVD-2026-16814)
Fleet is Fleet Device Management open source a device management platform that supports a wide range of operating systems and devices to help IT and security teams with device management, vulnerability reporting, MDM and more. An access control error vulnerability exists in Fleet versions prior t...
CVE-2020-24263
Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution. A non-admin user is allowed to spawn new containers with critical capabilities such as SYSMODULE, which can be used to take over the Docker host...
CVE-2020-24264
Portainer 1.24.1 and earlier is affected by incorrect access control that may lead to remote arbitrary code execution. The restriction checks for bind mounts are applied only on the client-side and not the server-side, which can lead to spawning a container with bind mount. Once such a container ...
CVE-2024-41121
Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets w...
CVE-2023-7325
Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request forgery SSRF vulnerability in the xmlrpc.sock handler. The product accepts specially crafted XML-RPC requests that can be used to instruct the server to connect to internal unix...
VulnCheck KEV: CVE-2023-7325
Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request forgery SSRF vulnerability in the xmlrpc.sock handler. The product accepts specially crafted XML-RPC requests that can be used to instruct the server to connect to internal unix...
EUVD-2020-18852
Malware in sbrugna...
EUVD-2020-16999
Malware in sbrugna...