CVE-2026-58138

CVE-2026-58138 — ثغرة RCE غير مصادق عليها في Conductor عبر مُقيِّم GraalVM -critical الخلاصة: يقوم Conductor من Orkes/OSS الإصدارات 3.21.21 إلى 3.30.2 بتقييم JavaScript المقدم من المستخدم في مهام INLINE باستخدام سياق GraalVM مع وصول كامل للمضيف HostAccess.ALL. نظرًا لأن واجهة برمجة التطبيقات...

Malicious code in confluence-inline-tasks (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9108ffab0ab767db4d505617face5df5b4ffd6d83b9ad5b0be43b22f50f77f7 Any computer that has this package installed or running should be considered...

MAL-2025-5679 Malicious code in confluence-inline-tasks (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9108ffab0ab767db4d505617face5df5b4ffd6d83b9ad5b0be43b22f50f77f7 Any computer that has this package installed or running should be considered...

Malicious NuGet Packages Caught Distributing SeroXen RAT Malware

Cybersecurity researchers have uncovered a new set of malicious packages published to the NuGet package manager using a lesser-known method for malware deployment. Software supply chain security firm ReversingLabs described the campaign as coordinated and ongoing since August 1, 2023, while linki...