PT-2026-70892

Name of the Vulnerable Software and Affected Versions Faker versions prior to 10.5.0 Description The faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns anoth...

CVE-2026-73231: Improper Neutralization of Directives in Dynamically Evaluated Code

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

PT-2026-70861

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An issue in the JavaScript scripting engine allows an authenticated user with write privileges to execute controlled code within the query scope of other users. This occurs when a...

PT-2026-70784

Name of the Vulnerable Software and Affected Versions anoid versions prior to 3.3.12 anoid versions prior to 5.1.11 Description The nanoidsize function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer. Providing a value of 2147483648 causes it to...

Underscore _flatten _isEqual DoS

The vulnerability of the flatten and isEqual functions in the JavaScript library for working with arrays, Underscore, is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2026-8404 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...

CVE-2026-44401

Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized href values in Markdown links. Attackers can craft Markdo...

Orkes Conductor CVE-2026-58138 (unauthenticated RCE) detection

Detects Conductor OSS / Orkes Conductor instances running a version below 3.30.2 that may be vulnerable to CVE-2026-58138 unauthenticated INLINE JavaScript RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Orkes Conductor / Conductor OSS instances vulnerable to CVE-2026-58138.""" from futu...

Orkes Conductor / Conductor OSS < 3.30.2 - Unauthenticated RCE (CVE-2026-58138)

CVE-2026-58138: Conductor OSS and Orkes Conductor versions below 3.30.2 allow unauthenticated remote code execution by registering a workflow with a malicious INLINE JavaScript task that abuses unsandboxed GraalVM HostAccess.ALL for Java reflection and Runtime.exec. !/usr/bin/env python3 -- codin...

EUVD-2026-55801

SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that...

CVE-2026-44401 Typemill CMS 2.x Persistent XSS via Markdown javascript URI

Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized href values in Markdown links. Attackers can craft Markdo...

CVE-2026-44401 Typemill CMS 2.x Persistent XSS via Markdown javascript URI

Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized href values in Markdown links. Attackers can craft Markdo...

EUVD-2026-55793

Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized href values in Markdown links. Attackers can craft Markdo...

CVE-2026-44401

Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized href values in Markdown links. Attackers can craft Markdo...

CVE-2026-44401

Typemill CMS 2.x contains a persistent XSS in the Markdown parser extension. Authenticated users with theme-configuration access can inject malicious JavaScript URIs by supplying unsanitized href values in Markdown links. The attack leverages javascript: schemes via ParsedownExtension.php or Twig...

CVE-2026-44401

Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized href values in Markdown links. Attackers can craft Markdo...

CVE-2026-44401 Typemill CMS 2.x Persistent XSS via Markdown javascript URI

Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized href values in Markdown links. Attackers can craft Markdo...

openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There is an integer overflow in TypedArray.prototype.set which can cause a DoS...

CVE-2026-18478

Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image. The issue was fixed in version 6.3.10...

Malicious code in chai-jsonss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1fff32102bc74783cae571646ec0fd68b14c614b35a63badd814a64caa3b67 On import, index.js invokes postCallers which resolves a base64-encoded URL stored in lib/const.js decoding to https://1uznbx.s.gy/7xdQmt, GETs the...