MAL-2026-17914 Malicious code in glassbeakasr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49081dd7d5152c882944c4e9a5f118e71daadc5efa3e71c96fbdffe0840dedb5 The package exposes a runprofile, url, kwargs function that fetches a caller-supplied URL and executes the response body as Python via execcompilesrc...

Malicious code in glassbeakasr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49081dd7d5152c882944c4e9a5f118e71daadc5efa3e71c96fbdffe0840dedb5 The package exposes a runprofile, url, kwargs function that fetches a caller-supplied URL and executes the response body as Python via execcompilesrc...

Malicious code in emberlytts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b082c02a5246d61d7d9a5392961f29f51bf9db1aebdb9901b79fa363f173ba4e Analysis of emberlytts 0.1.0 across 6 files surfaced no install-time or import-time network activity, no credential or environment reads targeting...

MAL-2026-17913 Malicious code in emberlytts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b082c02a5246d61d7d9a5392961f29f51bf9db1aebdb9901b79fa363f173ba4e Analysis of emberlytts 0.1.0 across 6 files surfaced no install-time or import-time network activity, no credential or environment reads targeting...

Malicious code in quasitonnts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85125cc2bc8e39e151e11ee36382b5d2e2167dfb215e654ade236e46b783b062 Package quasitonnts version 0.1.0 on PyPI was examined and no code paths performing credential access, outbound network I/O to attacker-controlled...

MAL-2026-17917 Malicious code in quasitonnts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85125cc2bc8e39e151e11ee36382b5d2e2167dfb215e654ade236e46b783b062 Package quasitonnts version 0.1.0 on PyPI was examined and no code paths performing credential access, outbound network I/O to attacker-controlled...

Malicious code in fromthehotel-poems (PyPI)

Source: kam193 bf72dad3e2f32ee2e66a3a5ee5642b4a20a9fb9458fcd677f6250b1e4b805906 One of the provided functions hides executing remote code from a newly created domain. During analysis, the remote code did not contain any malicious action. The description and other endpoints clearly suggest it's an...

EUVD-2026-98341

HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may allow the attacker steal cookie-based authentication credential...

CVE-2026-84244

IBM Guardium Data Protection 12.2 is vulnerable to a stored cross-site scripting (XSS) vulnerability in the Quick Search results grid . This flaw allows an unauthenticated attacker capable of influencing monitored database traffic to execute malicious scripts in the browser of an authenticated Gu...

PT-2026-103782

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...

CVE-2026-48482 GLPI: RCE via Form import

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a form administrator can use Form import with a crafted illustration or scene identifier that traverses outside the intended custom-asset directory. The imported file can be written to an executable server location...

CVE-2026-75744

Adobe Experience Manager Forms JEE is impacted by a stored Cross-Site Scripting (XSS) vulnerability. A high-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser upon visiting the affected page. This could result in the attacker gaining ...

EUVD-2026-84790

Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page...

CVE-2026-73169: Improper Neutralization of Input During Web Page Generation

Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Modbus transaction management interface of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to store...

CVE-2026-4103

CVE-2026-4103 is a stored cross-site scripting (XSS) vulnerability in WSO2 API Manager's Publisher Portal and Developer Portal , caused by insufficient HTML sanitization that allows untrusted user input to be rendered without proper encoding or neutralization. When affected API documents are view...

CVE-2026-4103 Cross-Site Scripting via HTML Sanitization in WSO2 Publisher and Developer Portals Allows Malicious Script Execution

Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user input to be rendered without proper encoding or neutralization. This enables the injection and execution of malicious JavaScript when affected API documents are viewed. Successful exploitation may...

Malicious code in harthat-hash (npm)

The package contains a preinstall hook which silently executes a malicious script with downloader functionality. This is characteristic of an ongoing North Korean state-sponsored campaign. --- Credit: OpenSSF source...

Malicious code in harthat-api (npm)

The package contains a preinstall hook which silently executes a malicious script with downloader functionality. This is characteristic of an ongoing North Korean state-sponsored campaign. --- Credit: OpenSSF source...

Malicious code in harthat-chain (npm)

The package contains a preinstall hook which silently executes a malicious script with downloader functionality. This is characteristic of an ongoing North Korean state-sponsored campaign. --- Credit: OpenSSF source...

EUVD-2026-74141

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...