Malicious code in rsflows-pexml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef5b11ec067e18cc3a024fee21e569e0f44cf180619e974cbb1dd8325e1b10c The package rsflows-pexml was found to contain malicious code. Source: ghsa-malware f1f4ac6cd17db4404613301b8405f7033d584985cb52af8c0aee3042bc1c0c8d...

MAL-2026-3422 Malicious code in rsflows-pexml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef5b11ec067e18cc3a024fee21e569e0f44cf180619e974cbb1dd8325e1b10c The package rsflows-pexml was found to contain malicious code. Source: ghsa-malware f1f4ac6cd17db4404613301b8405f7033d584985cb52af8c0aee3042bc1c0c8d...

CVE-2021-47939

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters. Attackers can send POST requests to /manager/index.php with malicious PHP code in...

CVE-2021-47949 CyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack

CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through the filemanager controller endpoint. Attackers can manipulate the completeStartingPath parameter in POST requests to...

CVE-2021-47939 Evolution CMS 3.1.6 Authenticated Remote Code Execution via Module Creation

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters. Attackers can send POST requests to /manager/index.php with malicious PHP code in...

CVE-2021-47939 Evolution CMS 3.1.6 Authenticated Remote Code Execution via Module Creation

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters. Attackers can send POST requests to /manager/index.php with malicious PHP code in...

CVE-2021-47939

Evolution CMS 3.1.6 is affected by an authenticated remote code execution vulnerability. Attackers with module-creation permissions can inject PHP code into module parameters and trigger execution by sending POST requests to /manager/index.php with malicious code in the post parameter. This can l...

Exploit for Missing Authentication for Critical Function in Cpanel

cPanelSniper CVE-2026-41940 — c...

Exploit for Unrestricted Upload of File with Dangerous Type in Filemanagerpro File_Manager

wp-file-manager-exploit-CVE-2020-25213-with-Zerologon Project...

MAL-2026-3420 Malicious code in noon-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2a4c1ac3896b7769b47ab6659bf7b0d49f229963c910d0c9b9be11c5291c12 The package noon-contracts was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in erslove (npm)

erslove is a typosquatting package impersonating resolve, the module resolution library implementing require.resolve semantics. The package bundles the legitimate resolve source and test fixtures to appear functional while hiding a credential-theft payload in index1.js, executed at install time v...

Exploit for Unrestricted Upload of File with Dangerous Type in Zohocorp Manageengine_Applications_Manager

CVE-2020-14008 - ManageEngine Applications Manager RCE Authen...

drm/amd/display: Fix dsc eDP issue

...

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

cPanel has released updates to address three vulnerabilities in cPanel and Web Host Manager WHM that could be exploited to achieve privilege escalation, code execution, and denial-of-service. The list of vulnerabilities is as follows - CVE-2026-29201 CVSS score: 4.3 - An insufficient input...

CVE-2026-42069 Kirby: Read access to site, user and role information is not gated by permissions

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, read access to site, user and role information is not gated by permissions. This issue has been patched in versions 4.9.0 and 5.4.0...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster-fips, crossplane-provider-aws-secretsmanager, yunikorn-k8shim-fips, crossplane-provider-aws-osis-fips, hydra-fips, crossplane-provider-aws-route53resolver, zitadel, longhorn-cli, docker, emqx-exporter-fips, cloud-provider-azure-fips,...

CVE-2026-39819 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster-fips, crossplane-provider-aws-secretsmanager, yunikorn-k8shim-fips, crossplane-provider-aws-osis-fips, hydra-fips, crossplane-provider-aws-route53resolver, zitadel, longhorn-cli, docker, emqx-exporter-fips, cloud-provider-azure-fips,...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster-fips, crossplane-provider-aws-secretsmanager, yunikorn-k8shim-fips, crossplane-provider-aws-osis-fips, hydra-fips, crossplane-provider-aws-route53resolver, zitadel, longhorn-cli, docker, emqx-exporter-fips, cloud-provider-azure-fips,...

GHSA-497X-JCXF-M478 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-secretsmanager, yunikorn-k8shim-fips, crossplane-provider-aws-osis-fips, hydra-fips, crossplane-provider-aws-route53resolver, zitadel, emqx-exporter-fips, cloud-provider-azure-fips, cloud-provider-azure, nvidia-nsight-compute-13.0, scorecard,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster-fips, crossplane-provider-aws-secretsmanager, yunikorn-k8shim-fips, crossplane-provider-aws-osis-fips, hydra-fips, crossplane-provider-aws-route53resolver, zitadel, longhorn-cli, docker, emqx-exporter-fips, cloud-provider-azure-fips,...