Software Supply Chain Smells: Lightweight Analysis for Secure Dependency Management

Modern software systems heavily rely on third-party dependencies, making software supply chain security a critical concern. We introduce the concept of software supply chain smells as structural indicators that signal potential security risks. We design and evaluate Dirty-Waters, a novel tool for...

PT-2026-27844

Name of the Vulnerable Software and Affected Versions Booking and Rental Manager versions n/a through 2.6.0 Description An authorization issue exists in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce. This is due to incorrectly configured access control...

PT-2026-27855

Name of the Vulnerable Software and Affected Versions Metagauss RegistrationMagic versions through 6.0.7.1 Description An incorrect privilege assignment exists in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager, allowing for privilege escalation. The issue...

PT-2026-28055

Missing Authorization vulnerability in Premmerce Premmerce Redirect Manager premmerce-redirect-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce Redirect Manager: from n/a through = 1.0.12...

Cisco Catalyst SD-WAN Manager（Cisco SD-WAN vManage） 跨站脚本漏洞

Cisco Catalyst SD-WAN Manager is a highly customizable dashboard provided by the American company Cisco. It simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. Cisco Catalyst SD-WAN Manager has a cross-site scripting vulnerability, which stems from...

Iperius Backup 访问控制错误漏洞

Iperius Backup is a backup tool developed by the Italian company Iperius Backup. Iperius Backup versions 8.7.3 and earlier contained an access control vulnerability, which was caused by improper handling of the NTLM2 Handler component, potentially leading to information leakage...

WordPress plugin Booking and Rental Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin Premmerce Redirect Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin Contact Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

EUVD-2026-14994

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save...

MAL-2026-2398 Malicious code in xrpl-hooks-ide (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cba4a53598147b0ea4a05d573906166d018f6026d4b245512f651c235c2bae3 The package xrpl-hooks-ide was found to contain malicious code...

MAL-2026-2397 Malicious code in wraith-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e01edc3106b7a83dd7050b7ade8ef141a38fac23b8829ed8d2f4e1f1402829b The package wraith-module was found to contain malicious code...

Malicious code in voodoo-internal-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66c21f000ea33496a8cd95744872d47bbd617d4a4cabdae400ae0361cf0faf3 The package voodoo-internal-api was found to contain malicious code...

MAL-2026-2396 Malicious code in voodoo-internal-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66c21f000ea33496a8cd95744872d47bbd617d4a4cabdae400ae0361cf0faf3 The package voodoo-internal-api was found to contain malicious code...

MAL-2026-2395 Malicious code in uuidvalidatorarabis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980bd443f5ff6b9b9a38a084ed533ef47f42bf5867df5d6281df19515171a6a9 The package uuidvalidatorarabis was found to contain malicious code...

Malicious code in uuidvalidatorarabis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980bd443f5ff6b9b9a38a084ed533ef47f42bf5867df5d6281df19515171a6a9 The package uuidvalidatorarabis was found to contain malicious code...

Malicious code in typescript-mock-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a51f9143ac378f3ef81840f6858a902bd37449fa9b93b0999e021321ddafac The package typescript-mock-data was found to contain malicious code...

Malicious code in this-is-my-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d72a917ddcec635fc210d8767a9c289b6d43128c589de76fe7c0548da33878d2 The package this-is-my-test-package was found to contain malicious code...

Malicious code in stormbreaker-shade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c845d690b6091601683bf61bdd858e5579c2fd4d33b770806b1bb113e9533f1 The package stormbreaker-shade was found to contain malicious code...

Malicious code in ssr-catalogue-sfcc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffd2663232d7c5508f63c063736d09a7c1fdfefe9783f5941c9214f687df7fb The package ssr-catalogue-sfcc was found to contain malicious code...